This is my package laravel-two-factor
58%
Total Score
caution
Usable with caveats: no commits in three months and all five workflow actions are unpinned.
The repository recorded zero commits and zero active maintainers in the last three months. For an authentication package, that is a notable maintenance and abandonment concern.
The release has seven runtime dependencies, including authentication and QR-code libraries. This is a moderate dependency surface for a Laravel two-factor package and adds some maintenance exposure.
A post-autoload-dump install script is present. This is a meaningful installation behavior to review, but the signal alone does not show unsafe or excessive activity.
The package has 13 releases over about 31 months, but only one release in the last 12 months. That suggests a slower maintenance cadence despite the recent v0.2.1 release.
There is one open issue and ten open pull requests, with no issues or pull requests merged in the last month. The backlog suggests limited responsiveness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pragmarx/recovery Version ^0.2.1 | — | — |
bacon/bacon-qr-code Version ^2.0 | — | — |
spatie/laravel-data Version ^3.0|^4.0 | — | — |
illuminate/contracts Version ^9.0|^10.0|^11.0|^12.0 | — | — |
pragmarx/google2fa-qrcode Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.