chillerlan/2fa-qrcode-bundle

Release historycaution

The package is about six months old but has only two releases, both published within the same day, so its longer-term maintenance pattern is not yet established.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, which is a meaningful maintenance warning for a package whose release history is also very short.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, weakening build reproducibility and supply-chain transparency.