utopia-php/auth

Dangerous workflowscaution

The sole workflow uses pull_request_target, which can be security-sensitive even though no untrusted checkout or script injection was detected; this warrants CI review.

Repo popularitycaution

The repository has modest popularity with 3 stars, 1 fork, and 1 watcher. This is weak supporting evidence, but popularity is not decisive and the activity signals are strong.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a hygiene gap for an authentication package, though it is not by itself evidence of abandonment.

Security policycaution

No repository security policy was found. For an authentication and token-handling library, this is a meaningful transparency and vulnerability-reporting gap.

Token permissionscaution

The workflow has top-level write permissions, increasing the potential impact of a CI compromise; this is a concrete permissions-hygiene concern despite the absence of other detected workflow hazards.