Laravel TOTP package for two-factor authentication with polymorphic support, recovery codes and QR Code generation.
67%
Total Score
caution
Usable with caveats: active development is offset by a young project and complete reliance on one maintainer.
The registry namespace and repository are owned by the same individual account, so there is no organizational backing shown to compensate for maintainer concentration.
The package is only 101 days old but has 81 releases, with releases often less than a day apart. This shows active publishing but also suggests unusually rapid iteration for a young dependency.
All 66 recent commits came from one contributor, giving the project a complete single-maintainer dependency for ongoing fixes and releases.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package that handles two-factor authentication.
The assessed release is not a prerelease, but the package remains below 1.0, so its public API and behavior may still change materially.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
endroid/qr-code Version ^5.0 | — | — |
laravel/framework Version ^12.0|^13.0|^14.0|^15.0 | — | — |
andydefer/laravel-repository Version ^2.17.30 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.