clef/instant2fa

Release historydanger

The package has had only two releases, both in November 2016, with no release in roughly nine years. That strongly indicates abandonment risk for a client library.

Repo commit activitydanger

The repository has no commits and no active maintainers in the last three months, consistent with the long release gap and indicating high maintenance risk.

Dependency profilecaution

The package declares four runtime dependencies, including Guzzle and JSON API libraries. This is a meaningful dependency surface for a small, inactive client, though not inherently unsafe.

Repo issue activitycaution

There is one open issue and no issue or pull-request activity in the last month, providing no evidence of active support.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. For an authentication-related client, the missing security checks reduce assurance.