artisanpack-ui/microsoft-oauth

Release historycaution

This is the first release and the package is 0 days old, so there is no track record yet to demonstrate long-term maintenance or compatibility.

Repo popularitycaution

The repository has no stars, forks, or watchers. As a newly released package this is weak supporting evidence, but it does not outweigh the observed maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting and response expectations less clear for a package handling OAuth tokens.

Workflow auditcaution

All five workflows were analyzed without untrusted checkouts or injection findings, and permissions are scoped in some workflows. However, all 16 action references are unpinned, and the low-confidence cache-poisoning finding is a workflow hygiene concern.