zhujinkui/tp5-auth

Release historydanger

The latest release was published in June 2019, with no releases in the last 12 months; the package has therefore gone more than seven years without a new release at collection time. Eight total releases provide some history, but not current maintenance evidence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no observed recent development activity.

Licensecaution

The artifact includes a license file and the repository also has one, so licensing is not absent. However, the manifest declares Apache-2.0 while the detected license is MIT, creating a material ambiguity for adopters.

Maintainerscaution

The package has one registry maintainer, which limits the visible publishing bus factor. This is partly consistent with the repository being owned by the same individual, but it leaves little demonstrated backup capacity.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for an authentication and authorization library.