nails/module-auth

Release historycaution

The package has only one release, published in June 2014, with no releases in the last 12 months. Recent repository activity partly offsets abandonment concerns, but the registry artifact itself is very old.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency for an authentication module, although Dependabot provides some compensating security tooling.

Version stabilitycaution

Version 0.1.0 is not a stable major release, which indicates limited release maturity. It is not marked as a prerelease, so this is a modest concern rather than a severe one.

Workflow auditcaution

All 10 referenced actions are unpinned, and the audit found two high-confidence template-injection findings in a migration workflow. No untrusted checkout or dangerous trigger was reported, so these are significant hygiene concerns rather than a standalone critical risk.