amethyst/authentication

Release historycaution

The package has 19 releases since July 2019, but none in the last 12 months and the latest release was in April 2024, indicating a prolonged maintenance gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern that development has stalled.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 7 action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in the test workflow. The workflows have no untrusted checkout or script-injection findings, which limits the concern.