aleexvdev/corvant

Release historycaution

This is the package's first release, published less than an hour before collection, so there is no release track record yet. The active repository provides some compensating evidence but cannot establish long-term stability.

Repo bus factorcaution

Two contributors were active in the last three months, but one contributor made 17 of 18 commits, leaving maintenance highly concentrated. The second contributor offers limited compensation.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. For an identity and access-management package, that reduces transparency around automated security checks.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all 4 of 4 action references are unpinned. This is a workflow supply-chain hygiene gap rather than a severe risk on its own.