pdsinterop/solid-auth

Repo bus factorcaution

Only one contributor made commits in the last 3 months, accounting for 100% of the 7 commits; organization backing provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations unclear for an authentication-focused library.

Version stabilitycaution

Version v0.15.0 is not a stable major release, so its pre-1.0 status implies less API stability, although it is not marked as a prerelease.

Workflow auditcaution

All 11 action references are unpinned, all four workflows grant top-level write permissions, and the audit found five high-confidence unpinned container-image findings. No untrusted checkout or script-injection sink was detected, but the workflow supply-chain and token hygiene remain significant concerns.