flownative/token-authentication

Repo bus factorcaution

All three commits in the last three months came from one contributor, leaving maintenance capacity concentrated. The organization-owned repository provides some handoff capacity, but no second recently active contributor is shown.

Repo toolingcaution

The project uses Composer but reports no security-scanning tooling. For an authentication package, that is a meaningful transparency and maintenance gap.

Security policycaution

The repository has no published security policy. This weakens the project's documented process for handling vulnerabilities in a security-sensitive package.