evopixel/socialiteproviders-minecraft-evopixel

Release historycaution

This is the first and only release, published less than one day ago, so there is no release track record or demonstrated maintenance cadence yet.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, but the package itself is less than one day old, so this is limited track-record evidence rather than abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency gap for a new authentication provider.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented for an authentication-related package.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only job permissions, and has no untrusted checkout or injection findings; however, both action references are unpinned, weakening build reproducibility.