thirty-two plugin for otplib
22%
Total Score
critical
Unfit to use: npm deprecates the package and directs users to otplib v13.
The entire package is marked deprecated, with npm explicitly directing users to upgrade to otplib v13. This makes version 12.0.1 unsuitable for a new dependency despite the active source repository.
The package has had no registry release for over six years, and only four releases in total. Active repository work partly offsets abandonment concerns, but this release line is clearly stale.
The repository name does not match this sub-package and its README does not mention the package, which creates some uncertainty about package ownership; the package README does link back to the otplib project repository.
All seven workflows were analyzed, use read-only permissions, and have no untrusted checkouts or script injections. A high-confidence template-injection finding in tag-release.yml remains a workflow hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
thirty-two Version ^1.0.2 | — | — |
@otplib/core Version ^12.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.