legatus/auth

Release historydanger

Only one release was published, on February 13, 2021, with none in the last 12 months. This long absence of releases is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in February 2021. No newer activity compensates for this maintenance gap.

Security policycaution

The repository has no security policy. For an authentication library, the absence of a documented private reporting process reduces transparency and response readiness.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous audit findings or untrusted checkouts, but all 10 action references are unpinned. That leaves build inputs exposed to upstream changes and is a meaningful hygiene caution.