spiral/auth

Repo bus factorcaution

One contributor accounts for 100% of recent commits. Organization backing provides some handoff capacity, but the observed activity still shows concentrated maintenance.

Repo commit activitycaution

Seven commits were made in the last three months, showing current activity. However, all were made by one active maintainer, limiting resilience if that person stops contributing.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, but it is mitigated somewhat by the repository's Psalm security scanning.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of the two action references are unpinned, which weakens build reproducibility without indicating an immediate severe risk.