zotenme/hyperf-jwt-auth

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single-contributor concentration is not visibly offset by organizational backing.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance dependent on a single person with no demonstrated recent handoff capacity.

Repo commit activitycaution

The repository received three commits in the last three months, showing ongoing activity but not a strong maintenance pace for an authentication library.

Repo popularitycaution

The repository has two stars and no forks or watchers, indicating limited external adoption and a smaller pool of likely reviewers or future maintainers.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no high-confidence audit findings or untrusted checkout or script-injection paths. However, both action references are unpinned, leaving a modest supply-chain hygiene gap.