luzzardik/flarum-third-party-login-only

Project backingcaution

The registry namespace and repository are owned by the same individual account, not an organization. This is consistent ownership, but it offers less organizational maintenance capacity.

Release historycaution

The package is only 49 days old and has three releases, all published within a very short period on its first release day. This shows initial activity but provides little evidence of sustained maintenance.

Repo bus factorcaution

One contributor made all 26 commits in the last three months, leaving no demonstrated backup maintainer and increasing the risk that development stops if that person becomes unavailable.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. For a small extension this is a transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, so users are not given a documented channel or process for reporting vulnerabilities.