horde/auth

Repo bus factorcaution

One contributor made all recent commits, giving the project a 100% top-contributor share. Organization backing provides some handoff capacity, but the observed recent activity remains concentrated.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, so recent source activity is limited even though releases continue. This is a mild maintenance concern rather than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build path is established while automated security coverage is limited.

Security policycaution

The repository has no security policy. For an authentication library, the absence of a documented vulnerability-reporting process is a meaningful transparency gap.

Workflow auditcaution

Both workflows were analyzed successfully with no reported audit findings, no untrusted checkouts, and no script injection. However, 2 of 4 action references are unpinned, which leaves some build reproducibility risk.