deegitalbe/server-authorization

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance concern despite the recent release and push.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling security issues in a package used for server authorization.

Workflow auditcaution

All 4 analyzed action references are unpinned, and the release workflow has a high-confidence finding that its app token inherits blanket installation permissions. The audit also flags trusted publishing; no untrusted triggers or checkout/script-injection sinks were found, so this is a workflow hygiene concern rather than a standalone severe risk.