andreygrin/web-eid-authtoken-validation-php

Release historycaution

This package has only one release, published 617 days ago, with no releases in the last 12 months. That is a meaningful maturity and maintenance concern, although the linked project remains active enough to provide supporting context.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a security-sensitive authentication library, that weakens confidence in ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are reported. The missing scanning is a moderate transparency and maintenance gap for authentication code.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear for a security-sensitive library.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, with no untrusted checkouts or injection findings. However, all three action references are unpinned, creating a workflow reproducibility and dependency-hygiene gap.