Package Health/azaharizaman/nexus-identity

azaharizaman/nexus-identity

Usable with caveats: this is a well-documented, tested, MIT-licensed early alpha with a matching source repository. However, it has published only once, had no commits in the last three months, and lacks security policy and automated security scanning for an identity package.

Latest v0.1.0-alpha1

Packagist

57%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last 3 months. For an early alpha security-sensitive package, this is a meaningful maintenance and abandonment concern.

Dependency profile

Seven runtime dependencies, including WebAuthn, COSE, OTP, QR-code, and a related Nexus package, create meaningful dependency surface for an authentication library, though the profile is not excessive on its own.

Project backing

The registry namespace and repository owner match, which supports clear ownership, though the owner is an individual account rather than an organization and therefore provides limited institutional backing.

Release history

Only one release exists, and there has been no new release for about 4.5 months despite the package being about 4.5 months old. This leaves maintenance continuity and maturity unproven.

Repo popularity

The repository has zero stars, forks, and watchers, providing no community validation or visible adoption support. Popularity is only supporting evidence, so this is a modest concern rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nexus Development Team

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^3.0	—	—
endroid/qr-code Version ^5.0	—	—
spomky-labs/otphp Version ^11.3	—	—
web-auth/cose-lib Version ^4.2	—	—
web-auth/webauthn-lib Version ^4.7	—	—