It includes clear consumer documentation, release notes, tests, security scanning, and pinned workflow actions. Organization backing and no deprecation or archive status provide useful support.
72%
Total Score
67
50
94
88
Fourteen runtime dependencies reflect a substantial authentication integration surface, including cryptographic and framework components. The profile is not inherently unhealthy, but it increases the maintenance surface compared with a small standalone library.
This is the package's first release, published today, so there is no established release track record yet. That is an early-maturity concern rather than evidence of abandonment.
One contributor made all two recent commits, concentrating current maintenance responsibility in a single person. Organization ownership provides some handoff capacity but does not remove the present concentration.
Two commits in the last three months show recent activity, but the small count provides only limited evidence of sustained maintenance for a new package.
The repository has no published security policy. For an authentication and WebAuthn package, that is a meaningful transparency and vulnerability-reporting gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
cycle/database Version ^2.22 | — | — |
componenta/auth Version ^3.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.