goedemiddag/webauthn-fork

Package scaffoldingdanger

The package includes a substantial README and this exact version has GitHub release notes, but the README explicitly says the package has been superseded by Laragear WebAuthn and points consumers elsewhere. That is a direct compatibility and support concern for a new dependency.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. Although the release history shows a recent release, the lack of current development weakens confidence in ongoing maintenance.

Repo package mentioncaution

The repository name matches the package, which is compensating evidence, but the package name does not appear in the README. Consumers therefore have limited confirmation that the linked project documents and supports this package.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The build setup is present while automated security coverage is limited.

Security policycaution

The repository has no published security policy. For an authentication and WebAuthn package, that reduces transparency about how security reports and fixes are handled.