frowhy/authentication

Release historydanger

The latest release was nearly ten years ago, with no releases in the last 12 months. This is strong evidence of abandonment despite a history of nine releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Package file treecaution

The package contains rsa_private_key.pem and rsa_public_key.pem alongside its source. Even without judging maliciousness, bundling key material in the package makes its security model and intended use less transparent.

Package scaffoldingcaution

The artifact includes a README with installation and usage examples, which supports consumers. The absence of tests and a changelog is normal for the published artifact, but the repository also reports no tests, leaving implementation changes difficult to validate.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured. That is a meaningful transparency gap for a package implementing authentication and cryptographic operations.