Package Health

componenta/auth-webauthn

It includes clear consumer documentation, release notes, tests, security scanning, and pinned workflow actions. Organization backing and no deprecation or archive status provide useful support.

Latest v1.0.0PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Dependency profilecaution

Fourteen runtime dependencies reflect a substantial authentication integration surface, including cryptographic and framework components. The profile is not inherently unhealthy, but it increases the maintenance surface compared with a small standalone library.

Release historycaution

This is the package's first release, published today, so there is no established release track record yet. That is an early-maturity concern rather than evidence of abandonment.

Repo bus factorcaution

One contributor made all two recent commits, concentrating current maintenance responsibility in a single person. Organization ownership provides some handoff capacity but does not remove the present concentration.

Repo commit activitycaution

Two commits in the last three months show recent activity, but the small count provides only limited evidence of sustained maintenance for a new package.

Security policycaution

The repository has no published security policy. For an authentication and WebAuthn package, that is a meaningful transparency and vulnerability-reporting gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/clock
Version ^1.0
—
—
cycle/database
Version ^2.22
—
—
componenta/auth
Version ^3.0
—
—
psr/http-factory
Version ^1.0
—
—
psr/http-message
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
19 hours ago
Created
19 hours ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform