nswdpc/silverstripe-authentication-boilerplate

Release historycaution

The package has 24 releases over nearly six years, but none in the last 12 months and its latest registry release was over a year ago. The recent repository push provides some compensating evidence, but does not show a current registry release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent push shown by repository status partly offsets this, but current development activity is still thin.

Security policycaution

The repository has no published security policy. For an authentication package, this is a meaningful transparency gap because it gives maintainers' vulnerability-reporting process no visible documentation.

Version stabilitycaution

This release is a release candidate, while the registry reports v1.0.4 as the latest stable version. That makes this version less suitable when a stable dependency is required.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both of its two action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.