devinci-it/shadow-auth

Package scaffoldingcaution

The package includes a substantial README, which helps consumers integrate it. No tests or changelog are present; the missing tests are more significant for an authentication library, while the missing changelog is a minor gap.

Project backingcaution

The registry namespace and repository owner both identify devinci-it, but the owner is an individual account rather than an organization. This offers some ownership consistency without demonstrating a broad backing team.

Release historycaution

The package has seven releases clustered within three days, followed by no newer release for roughly six months. That shows initial activity but limited evidence of sustained maintenance.

Repo popularitycaution

The repository has one star, no forks, and no watchers. Popularity is only supporting evidence, but these counts provide little external evidence of maturity or review.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a meaningful transparency and maintenance gap for authentication software.