imemento/sdk-auth

Release historycaution

The package has existed for over 7 years and released version 12.0.0 about 7 months ago, but only one release appeared in the last 12 months, indicating a slower cadence.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months, despite being pushed for the current release; this weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 3 action references are unpinned, weakening build reproducibility.