backstage/filament-2fa

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk even though the linked repository remains available.

Release historycaution

The package has 74 releases, but none in the last 12 months; the latest release was about 15 months ago. This weakens confidence that the published dependency will receive timely fixes.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, despite a recent repository push. This indicates uncertain current maintenance capacity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with a small backlog remaining. This provides little evidence of active issue handling.

Token permissionscaution

Three workflows request top-level write permissions and two omit top-level permissions, which is weaker workflow permission hygiene than a least-privilege setup. This adds a modest supply-chain concern but is secondary to the registry deprecation.