Package Health/rrd108/api-token-authenticator

rrd108/api-token-authenticator

Its small audience and one-person publishing base limit independent oversight, while recent commit activity is quiet. Clear documentation, tests, licensing, and a focused dependency set provide useful support for adoption.

Latest 1.2.2

Packagist

72%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one account has registry publishing access. The repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although releases continued, this is a meaningful sign of limited current development activity.

Repo popularity

The repository has only 3 stars and no forks, which limits evidence of broad community review or an independent support base. Popularity is supporting evidence, so this is a modest concern rather than a decisive risk.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, though the repository does use GitGuardian scanning.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 6 action references are unpinned, leaving a modest reproducibility and action-integrity gap.