componenta/auth-totp
Testing, release notes, licensing, and readme coverage provide useful evidence for consumers. The project is too new to establish a durable maintenance record, and recent work rests with one contributor despite organization backing.
68%
Total Score
67
50
93
88
Health Score Breakdown
The package has 12 runtime dependencies, including several related Componenta Auth packages and an OTP library; this is a meaningful integration surface but not inherently excessive for an authentication component.
This is the package's first release, published less than a day ago, so there is no track record of sustained maintenance or release continuity yet.
One contributor made all two recent commits, concentrating current maintenance knowledge; organization ownership provides some handoff capacity but does not remove the present concentration.
Two commits in the last three months show some activity, but this is a very small sample for a new release and does not establish sustained maintenance.
The repository has no security policy, which is a transparency gap for an authentication package handling encrypted TOTP credentials and reauthentication.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/clock Version ^1.0 | — | — |
cycle/database Version ^2.22 | — | — |
componenta/auth Version ^3.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 19 hours ago
- Created
- 19 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.