bannerstop/keycloak

Release historycaution

The package is 0 days old, with all 10 releases published on the same day and a median interval of 0 days, so it has not demonstrated sustained maintenance or release maturity.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the prior 3 months. Because the package and repository are only 0 days old, this is mainly a lack of demonstrated maintenance rather than evidence of a long-term collapse.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap for a security-sensitive authentication client.

Workflow auditcaution

The workflow has read-only permissions, no untrusted checkouts, no script injection, and no audit findings. However, all 4 of 4 action references are unpinned, leaving workflow dependencies less reproducible and more exposed to upstream changes.