lichunlong0630/think-auth

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the repository having been inactive since January 2020. This materially increases abandonment risk.

Licensecaution

A license file is present in both the artifact and repository, but the manifest declares Apache-2.0 while the detected file says MIT. The mismatch requires licensing verification before adoption.

Lifecycle scriptscaution

A post-autoload-dump script runs during installation. This is a mild transparency concern because installation performs extra actions, but the signal alone does not indicate severe dependency risk.

Project backingcaution

The repository is owned by an individual account, so the single registry maintainer is consistent with the project’s ownership context. There is no organization backing to compensate for the thin maintenance evidence.

Release historycaution

The package has had no release in over six years, with four releases clustered on one day and none in the last 12 months. This is strong evidence of abandonment risk.