FIDO2/Webauthn library for PHP and Symfony Bundle. This Branch is a cpoy of web-auth/webauthn-framework 4.9.2 with some changes for personal use.
43%
Total Score
25
79
100
The package is 312 days old but has only one release, with no established release cadence to demonstrate sustained maintenance.
The repository recorded 0 commits and 0 active maintainers in the past three months, indicating a meaningful maintenance gap for a package released only once.
There are 12 open pull requests, while no issues or pull requests were opened or merged in the past month; this supports the concern that activity has stalled.
The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no additional maturity signal alongside the limited release and commit history.
The audit covered all 8 workflows with no detected sinks or high-severity findings, but all 45 action references are unpinned, weakening build reproducibility and update control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
nyholm/psr7 Version ^1.5 | — | — |
symfony/uid Version ^6.1|^7.0 | — | — |
lcobucci/clock Version ^2.2|^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.