input-otp

Project backingcaution

The repository is owned by an individual rather than an organization, so the small contributor base and concentrated commits represent a genuine continuity concern.

Repo bus factorcaution

Commit activity is concentrated in one contributor at about 76%, which creates continuity risk, although the repository still has two other active contributors and substantial recent activity.

Repo toolingcaution

The repository uses established build tooling and TypeScript, but it reports no security-scanning tools; this is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear for a package used in authentication-related interfaces.

Token permissionscaution

One workflow lacks top-level permissions and the release workflow grants top-level write permissions, so CI token scope is not uniformly minimized.