shawm11/hawk-auth

The package includes tests, a changelog, and clear documentation. It has no repository security policy or automated security scanning, so future fixes may be harder to verify.

Latest 1.0.9

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 11 releases since June 2018, but none in the last 12 months and the latest release was nearly two years ago. The README says the protocol is considered complete, which partly explains the slow cadence but does not remove maintenance risk.

Repo bus factor

All recent commits come from one contributor, giving the project a high bus-factor risk. The repository is user-owned rather than organization-owned, so there is no provided backing signal to compensate for that concentration.

Repo commit activity

Only one commit was made in the last three months by one active maintainer. This is some recent activity, but it is too limited to demonstrate strong ongoing maintenance.

Repo tooling

Composer and Robo build tooling are present, but no security-scanning tools were detected, leaving a verification gap for a cryptographic authentication library.

Security policy

The repository has no security policy, which makes vulnerability reporting and coordinated fixes less transparent for a security-sensitive authentication package.