indieauth/client

Repo bus factorcaution

All recent commits came from one contributor, concentrating maintenance responsibility; organization backing provides some ability to hand work off but does not remove the current concentration.

Repo commit activitycaution

There was one commit in the last three months, so maintenance is present but limited in volume.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting and response expectations less clear for consumers.

Workflow auditcaution

The workflow audit completed cleanly and uses read-only permissions, but both analyzed actions are unpinned, reducing reproducibility and update integrity.