sirix/mezzio-authentication

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest process gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, which reduces transparency about vulnerability reporting for an authentication package.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no detected sinks or audit findings. However, both action references are unpinned, leaving a modest reproducibility and workflow supply-chain gap.