costsrl/cost-authentication

Licensecaution

A license file is present, so the release is licensed, but its detected MIT text conflicts with the manifest's BSD-3-Clause declaration. Consumers should resolve this licensing inconsistency before adoption.

Release historycaution

The package has only one release, published about 3 years and 6 months ago, with no releases in the last 12 months. That is substantial evidence of limited ongoing maintenance for a dependency.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not harmful by itself, but alongside the single release it provides little evidence of an active maintenance community.

Repo toolingcaution

The project uses Composer, providing basic build tooling, but no security-scanning tools were detected. For an authentication package, that missing security practice is a meaningful transparency gap.

Repository archivedcaution

The repository is not archived, which preserves the possibility of future maintenance, but its last push was about 3 years and 6 months ago and supports the stale-release concern.