idct/single-use-token-manager

Release historycaution

The package is only 56 days old and has three releases, all published within roughly eight hours, so its longer-term maintenance record is still limited.

Repo bus factorcaution

All 20 commits in the last three months came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a security-relevant token library.

Workflow auditcaution

The single analyzed workflow is complete and has no detected injection or dangerous audit findings, but all five referenced actions are unpinned, reducing build reproducibility.