vinkas/lauth

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption and maintenance warning.

Release historydanger

The package has had no releases in the last 12 months despite being 687 days old; its six releases were concentrated near its initial publication.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, confirming a lack of current development activity.

Repository archiveddanger

The linked repository is archived, so it is no longer positioned for normal upstream maintenance even though it was pushed on July 22, 2025.

Workflow auditdanger

All 14 analyzed action references are unpinned, and a high-confidence finding reports a GitHub App token inheriting blanket installation permissions. The audit found no untrusted checkout or script-injection path, but the remaining workflow exposure is still a serious hygiene concern.