roundly-consulting/auth-for-laravel

Dependency profilecaution

The package declares 26 runtime dependencies, including several related security components. This creates a broad maintenance surface, although the profile is coherent for the authentication features described.

Release historycaution

This is the package's first release, published today, with only one release and no established release cadence. That limits evidence of long-term maintenance.

Repo bus factorcaution

All 51 recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization backing provides some handoff capacity but does not remove the concentration risk.

Workflow auditcaution

All three workflows were analyzed successfully and had no untrusted checkouts, script injection, or audit findings. However, all 10 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.