whilesmart/laravel-user-authentication

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release and push provide some compensating evidence.

Repo toolingcaution

Composer and Make tooling are present, but no security-scanning tools were detected. For an authentication package, that is a moderate transparency and maintenance gap.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear for a package handling authentication.

Workflow auditcaution

All 10 analyzed action references are unpinned, and two release workflows use top-level write permissions; the audit also found a high-confidence low-severity ad hoc package installation. No untrusted checkout or script-injection paths were found, limiting the impact to workflow hygiene.