kominfo-kabtang/portal-sso-client

Release historycaution

The package is only 0 days old, with three releases published within about 24 hours, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activitycaution

There are no commits or active maintainers recorded over the last three months. Because the repository is newly created, this primarily shows that a long-term maintenance record has not yet been established.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. That is a modest transparency and upkeep gap for a package handling authentication flows.

Security policycaution

The repository has no security policy. For an SSO client, this makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 6 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.