Package Health

giann/webauthn-lib

Fork of web-auth/webauthn-lib that supports Android FIDO2/Passkey attestations

Latest 4.5.2PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release and indicating stalled maintenance.

Dependency profilecaution

The package has 17 runtime dependencies, including cryptographic, parsing, and process-related components. This is a meaningful dependency surface for a security-sensitive authentication library, though the signal does not show that any dependency is unsafe.

Package scaffoldingcaution

The published artifact omits tests and a changelog, which is normal packaging practice, but the repository also reports no tests. The missing repository test evidence is a modest concern for an authentication library, while no release notes are available to offset it.

Project backingcaution

The package and repository are owned by the same individual account. There is no organization backing shown, so the project appears dependent on a small ownership base.

Release historycaution

The package has 76 releases over about seven years, but none in the last 12 months and the latest release was published roughly two and a half years ago. This strong historical cadence is offset by the current inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Florent Morselli
All contributors

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.1
—
—
ramsey/uuid
Version ^3.8|^4.0
—
—
beberlei/assert
Version ^3.2
—
—
fgrosse/phpasn1
Version ^2.1
—
—
psr/http-client
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform