assegaiphp/auth

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users lack a documented route for reporting vulnerabilities in an authentication package.

Version stabilitycaution

Version 0.10.0 is not a stable major release, so compatibility changes remain more likely even though it is not marked as a prerelease.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no dangerous audit findings, but all 3 action references are unpinned, weakening build reproducibility and supply-chain hygiene.