hwi/oauth-bundle

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months, indicating limited recent maintenance activity despite the current release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were analyzed without untrusted checkouts or script injection, but all 9 action references are unpinned and one workflow grants top-level write permissions, creating workflow hygiene and change-integrity concerns.