aligent/bypass2fa

Release historydanger

The package has had no release in more than three years: its latest release was January 16, 2023, and it had no releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, leaving uncertainty about whether the linked repository is the intended source. Organization backing provides some context but does not resolve that mismatch.

Security policycaution

The repository has no security policy. For a module that changes authentication behavior, this reduces transparency around vulnerability reporting and maintenance response.

Workflow auditcaution

All 4 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. The workflows had no untrusted checkout or script-injection findings, which limits the risk.