boogiebaeren/contao-google-sso-bundle

Release historycaution

The latest registry release was in February 2024, with no releases in the last 12 months. That long release gap raises maintenance concerns, although the repository shows recent activity.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months. That is limited activity, but it partially offsets the old registry release through a recent repository update.

Security policycaution

No repository security policy was found. This is a transparency gap, though it is less significant for a small bundle than evidence of abandonment or unsafe release workflows.

Version stabilitycaution

Version 0.6.3 is not a prerelease, but the package remains below 1.0, so its API and compatibility maturity are less established than a stable-major release.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-trigger sinks. However, both action references are unpinned, leaving the workflow exposed to upstream action changes.