illuminate/auth

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months, a maintenance warning; the strong recent release cadence and current repository push partly offset it.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest repository hygiene gap rather than a direct dependency risk.

Security policycaution

No repository security policy was found, reducing transparency for vulnerability reporting and response.

Workflow auditcaution

The single workflow uses a pull_request_target trigger without an untrusted checkout or script-injection sink, but its only action reference is unpinned. The audit completed fully with no substantive findings.