doctormckay/steam-totp

The package is small, clearly MIT-licensed, documented, and has no install-time scripts. Its limited source tree and absent security policy provide little evidence of ongoing maintenance or operational maturity.

Latest v1.0.1

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, with the latest published about 9 years ago and no releases in the last 12 months. This is strong evidence of abandonment risk despite the package's age.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the old last push and release history, this materially raises abandonment risk.

Repo package mention

The repository name does not match the package name and its README does not mention the package. A sub-package explanation is not provided by the collected evidence, so package provenance is less clear.

Repo tooling

The repository uses Composer, providing basic build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap for a dependency handling authentication-related functionality.

Repository archived

The repository is not archived, which is a modest compensating signal, but its last push was about 9 years ago and does not demonstrate current maintenance.