initphp/auth

Release historycaution

Only two releases exist across roughly four years, with one release in the last 12 months; this suggests a slow maintenance cadence, though the latest release is recent.

Repo commit activitycaution

No commits and no active maintainers were observed in the last three months, which is a meaningful maintenance warning despite the recent repository push.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than a standalone severe risk.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all seven action references are unpinned, leaving them exposed to upstream tag changes.