mezzio/mezzio-authentication-oauth2

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance even though releases and pull-request merges continued.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap for an authentication component.

Workflow auditcaution

All three workflows were analyzed with no dangerous audit findings or untrusted checkouts. However, one workflow grants top-level write permissions and two of three action references are unpinned, creating moderate workflow hygiene concerns without an untrusted trigger or sink.