In order for the Commons app to remain on the WMF account, we need to ensure that their authentication logic is in line with our privacy policy.

To do that, we need to do a code review of the authentication code and ensure credentials are securely stored and transmitted and not sent to any 3rd parties.