Package Health/fond-of-oryx/customer-token-manager-one-time-password-connector

fond-of-oryx/customer-token-manager-one-time-password-connector

The package includes tests, a clear MIT license, and only two runtime dependencies. Its organization-owned repository is not archived, but maintenance evidence is dated and security policy coverage is absent.

Latest 2.0.0

Packagist

54%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with the latest published more than three years ago and none in the last 12 months. This is strong evidence of stalled maintenance, though the package may be feature-complete.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the latest release being more than three years old. This materially raises abandonment risk.

Repo popularity

The repository has zero stars and forks and one watcher, showing little external adoption or review. Popularity is supporting evidence only, but it provides no additional confidence for this inactive package.

Repo tooling

The repository uses Make and Composer, indicating basic build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than proof of unsafe code.

Security policy

No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. This matters more for a token and one-time-password connector than for a purely cosmetic library.