citruslab/totp

Release historycaution

The package has 10 releases in the last 12 months, but the median interval is 0 days, indicating a bursty release pattern rather than steady maintenance evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap for a package handling authentication codes.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports are handled for an authentication-related library.

Workflow auditcaution

The single workflow has read-only permissions and no dangerous audit findings, but its one action reference is unpinned, leaving avoidable build-integrity risk.