slepic/apple-sign-in-client-secret-generator

Release historydanger

The package has made only three releases, all in March 2022, with no releases in the last four years. This indicates prolonged abandonment for a package handling authentication credentials.

Repo commit activitydanger

There have been no commits and no active maintainers in the last three months, consistent with no repository activity since March 2022. This is the strongest abandonment concern in the assessment.

Repo popularitycaution

The repository has only 2 stars, 2 forks, and 1 watcher. This provides little evidence of broad review or community support, although popularity is supporting evidence rather than a verdict.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. For a package that generates authentication client secrets, the missing security tooling is a meaningful hygiene gap.

Security policycaution

The repository has no security policy. That leaves no documented process for reporting or handling vulnerabilities in authentication-related code.