lion/authentication

This release appears suitable to depend on: it is a stable v6 release from a package with 23 releases over roughly 3.5 years, including 9 releases in the last 12 months, and it is not deprecated. The repository is active, non-archived, correctly associated with the package, organization-backed, tested, licensed, and uses Composer plus Dependabot. The main concerns are the very concentrated recent maintenance base—one contributor made all four commits in the last three months—and limited repository adoption, with only 1 star and no forks. The missing security policy and incomplete top-level workflow permission declaration are hygiene gaps, but the workflow analysis found no dangerous patterns and the available evidence does not indicate abandonment or a severe dependency risk.

Latest v6.0.5Packagist

Health Score Breakdown

Repo bus factorcaution

All four recent commits came from one contributor, creating a genuine continuity risk; organization backing partly compensates because maintenance can potentially be handed off within the organization.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 1 watcher, which is limited adoption evidence and modestly increases ecosystem and support uncertainty, though popularity is not itself a health verdict.

Security policycaution

No security policy was found, leaving vulnerability-reporting expectations undocumented; this is a transparency and response-process gap.

Token permissionscaution

The sole workflow lacks top-level permissions and uses job-level permissions only; no top-level write permissions were observed, but the permission posture is less explicit than preferred.

View all 20 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.