bogosoft/http-auth

Release historycaution

The package has had only one release, in November 2020, with no releases in about 5 years and 10 months. This is strong evidence of possible abandonment, though the stable 1.0.0 status and focused scope partly reduce the concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the last push occurring about 5 years and 10 months ago. This materially raises maintenance and abandonment risk.

Repo popularitycaution

The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad community review or support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap, especially for authentication middleware.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This weakens security-response transparency.