cherubimro/drupal-mfa

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, despite the package being about 227 days old; this is the strongest evidence of weak ongoing maintenance.

Maintainerscaution

One registry publishing maintainer is a thin operational base for a security-sensitive module, although the repository owner is the same individual and there is no evidence here of broader project backing.

Release historycaution

The package is 227 days old but has only two releases, both published within about 33 minutes, providing little evidence of an established release process.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected. That is a hygiene weakness for an authentication module, though it does not by itself show abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a security-sensitive package.