wg-hyve/cloak-port

Release historycaution

The package has 12 releases, but none in the last 12 months and the latest release was about 2 years and 2 months ago, indicating meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months; together with the old latest push, this raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported, leaving a modest transparency and maintenance gap for an authentication package.

Workflow auditcaution

The only workflow scopes permissions read-only and has no reported audit findings, but all 3 action references are unpinned, weakening build reproducibility and supply-chain hygiene.