basic preset for otplib
22%
Total Score
critical
Unfit to use: npm marks this package deprecated and directs users to otplib v13.
The entire package is deprecated, with npm explicitly directing users to upgrade to otplib v13; this release should not be chosen for a new dependency.
The package has had no release in more than six years, with four releases total and none in the last 12 months, despite the linked project showing current activity.
No build attestation or trusted-publisher provenance is available, reducing release transparency, although the package otherwise has a clear artifact license and source repository.
Two contributors were active, but one made 16 of 17 recent commits, leaving maintenance heavily concentrated in a single person.
The repository name does not match this package and its README does not mention the package, creating uncertainty about how directly the repository supports this artifact.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@otplib/core Version ^12.0.1 | — | — |
@otplib/plugin-crypto Version ^12.0.1 | — | — |
@otplib/plugin-thirty-two Version ^12.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.