webfiori/oauth

Release historycaution

This is the only release, published about 385 days ago, with no releases in the past 12 months. The limited history makes long-term maintenance less established.

Repo commit activitycaution

There were no commits and no active maintainers in the past three months. Combined with no releases in the past year, this weakens confidence that the project is actively maintained.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing little external evidence of adoption. Popularity is only supporting evidence, so this does not by itself make the package unsafe to depend on.

Workflow auditcaution

All four workflows were analyzed without untrusted checkouts or script injection, but all 10 action references are unpinned and each workflow has a high-confidence medium-severity secrets-inherit finding. Broad secret inheritance and unpinned actions are meaningful supply-chain hygiene weaknesses.