blankogmbh/kirby-oauth

Registry deprecationdanger

Packagist marks the entire package as abandoned and names thathoff/kirby-oauth as its replacement. This is a major adoption risk even though the assessed release is current.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, indicating that ongoing development activity has recently stopped.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though other repository documentation and release evidence partly offset it.

Workflow auditcaution

The audit covered both workflows without high-confidence findings or untrusted execution sinks, but all 4 action references are unpinned and one workflow grants top-level write access. This is a supply-chain hygiene concern, not a standalone severe risk.