stromcom/auth-client

Project backingcaution

The registry namespace and repository owner match, but the owner is a User rather than an organization, so the project shows limited visible backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. Because the package is only about 133 days old and released recently, this is a meaningful maintenance concern but not evidence of abandonment by itself.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, all 6 of 6 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.