Package Health/openeuropa/oe_authentication

openeuropa/oe_authentication

This is a mature, actively released, stable package with a clear license, substantial documentation, tests, changelog, appropriate repository linkage, and organization backing. The repository is not archived and the latest release and push are current, while dependencies remain limited and the workflow analysis found no dangerous patterns. The main concerns are that recent commit activity is concentrated entirely in one maintainer, the repository lacks a security policy and explicit workflow token permissions, and install/update lifecycle scripts increase operational complexity; these warrant review but do not outweigh the package's strong maintenance and transparency evidence.

Latest 1.22.0

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

post-install-cmd and post-update-cmd scripts add install-time execution risk and operational complexity, so consumers should inspect their behavior before adoption.

Repo bus factor

One contributor made 100% of the five commits in the last 3 months. Organization backing provides some handoff capacity, but no second recently active contributor is shown, so concentration remains a maintenance risk.

Repo commit activity

Five commits were made in the last 3 months, showing current activity, but all were produced by one active maintainer, limiting demonstrated maintenance breadth.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The build setup is established, while the missing scanning layer is a modest transparency and defense-in-depth gap.

Security policy

No security policy was found in the repository, leaving vulnerability reporting and response expectations less transparent for consumers.