artisanpack-ui/apple-oauth

Release historycaution

This is the first release and the package is only 0 days old, so there is no historical evidence of sustained maintenance or release stability yet.

Repo bus factorcaution

All 10 recent commits came from one contributor, creating a narrow maintenance base. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest transparency and maintenance gap for an OAuth package.

Security policycaution

The repository has no security policy, which is a transparency gap for a package handling OAuth credentials and token storage.

Workflow auditcaution

All 16 analyzed action references are unpinned, so workflow inputs can change unexpectedly. The reported cache-poisoning finding has low confidence and is hygiene at most; the audit otherwise found no untrusted checkout or script-injection path.