RFC 6238 TOTP implementation for otplib
82%
Total Score
75
100
100
100
Two contributors are active, but one authored 16 of 17 recent commits, leaving maintenance heavily concentrated in a single person.
All seven workflows were analyzed, use read-only permissions, and pin all 58 action references. However, two high-confidence template-injection findings in release-related workflows are a meaningful automation hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@otplib/uri Version 13.5.0 | — | — |
@otplib/core Version 13.5.0 | — | — |
@otplib/hotp Version 13.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.