flametrench/identity

Clear licensing, tests, and a complete README support adoption. Two workflow dependencies are unpinned, adding release-hygiene risk; organization backing offsets the single registry publisher.

Latest v0.3.1

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months. That is a meaningful maintenance concern, despite the recent release history.

Repo tooling

Composer is used for the build, but no security scanning tools were detected. The missing scanning layer is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policy

The repository has no SECURITY.md or other detected security policy. For an identity and authentication library, the absence makes vulnerability reporting and response expectations less clear.

Version stability

v0.3.1 is not a prerelease, but the package is below a stable major version and 54.5% of recent releases were prereleases. Consumers should expect some API evolution.

Workflow audit

All workflows were analyzed with no high- or medium-confidence audit findings, and there are no untrusted checkouts or script injections. However, both action references are unpinned, weakening build reproducibility.