intervention/httpauth

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent development activity, although the package also has a recent release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency gap.

Security policycaution

The repository has no published security policy, so vulnerability-reporting and response expectations are not documented.

Workflow auditcaution

The workflow audit completed cleanly, uses read-only permissions, and found no dangerous sinks or audit findings, but both analyzed action references are unpinned, weakening build reproducibility.