Package Health/claudiodekker/laravel-auth-core

claudiodekker/laravel-auth-core

Tests and a matching MIT license provide useful baseline assurance, and the workflow audit found no high-severity issues. The single maintainer, absent security policy, and modest project adoption add uncertainty for a security-sensitive authentication library.

Latest v0.2.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published over three years ago, with no releases in the last 12 months. That long period without a new version is strong evidence of abandonment risk.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the package having received no release since 2023. This materially increases maintenance and abandonment risk.

Maintainers

One registry publishing account is consistent with an individually owned repository, so the count alone is not a defect. Combined with zero recent commit activity, it provides no visible backup maintenance capacity.

Project backing

The registry namespace and repository owner match, and the owner is an individual rather than an organization. This confirms ownership alignment but offers no organizational backing to compensate for inactivity.

Repo popularity

The repository has 2 stars, 0 forks, and 1 watcher, indicating limited external adoption. Popularity is supporting evidence rather than a verdict, but it provides little compensating confidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Claudio Dekker

Direct Dependencies

Dependency	Last Release	Score
nyholm/psr7 Version ^1.5	—	—
laravel/framework Version ^9.33\|^10.0	—	—
pragmarx/google2fa Version ^8.0	—	—
bacon/bacon-qr-code Version ^2.0	—	—
web-auth/webauthn-lib Version ^4.0	—	—