netlogix/nxkeycloak

The repository includes tests, a focused package layout, and clear documentation from an organization-backed project. Maintenance has stopped since May 2022, while the workflow uses broad write permissions and leaves all nine actions unpinned.

Latest 1.0.0

Packagist

44%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published in May 2022, with no releases in the last 12 months. That long silence is a substantial maintenance and abandonment concern.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates maintenance has effectively stalled.

Repo tooling

The project uses Make and Composer, but no security-scanning tool was detected. This is a modest transparency and hygiene gap, not evidence that the package is unsafe by itself.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. That matters for an authentication extension and adds to the maintenance concerns.

Workflow audit

The single workflow gives every workflow a top-level write token and all nine action references are unpinned. No untrusted checkout, injection, or high-confidence audit finding was reported, so this is a release-hygiene caution rather than a severe risk.