krabo/login-with-code-bundle

Licensecaution

The artifact declares LGPL-3.0-or-later, but its license file was detected as AGPL-3.0. A license file exists, so this is a compatibility and clarity concern rather than an unlicensed release.

Repo bus factorcaution

One contributor made all 11 commits in the last 3 months. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 11 commits in the last 3 months, but all activity came from one active maintainer. Recent work is positive, while the narrow maintenance base lowers resilience.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance concern.

Security policycaution

The repository has no security policy. For a bundle handling login and passwordless authentication flows, that leaves vulnerability reporting and response expectations unclear.