nowo-tech/auth-kit-bundle

Dangerous workflowscaution

Six workflows were analyzed with no untrusted checkouts or script-injection findings, but one pull_request_target workflow remains a privileged workflow pattern that merits review.

Dependency profilecaution

The package declares 23 runtime dependencies, including substantial Symfony, Doctrine, and Nowo components. This is understandable for a full authentication bundle but increases transitive dependency and upgrade surface.

Release historycaution

The package is only 81 days old but has 52 releases, including 50 in the last 12 months and a median interval of about 6 hours. This demonstrates active iteration, though the very high cadence leaves less long-term stability history.

Repo bus factorcaution

One contributor made all 72 commits in the last three months, creating a genuine single-maintainer continuity risk. Organization ownership partly mitigates handoff risk, but no second active contributor is evidenced.

Repo commit activitycaution

The repository recorded 72 commits in the last three months, showing strong recent activity, but all activity came from one active maintainer.