haikiri/simple-php-totp

The package is small, focused, tested, and has a clear README with minimal runtime dependencies. Recent repository activity is absent, while workflow references are unpinned and the project has no security scanning or policy, so future maintenance and build integrity deserve caution.

Latest 2.0.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the package is only about 223 days old and has continued releasing.

Repo popularity

The repository has no stars, forks, or watchers. Popularity is only supporting evidence, and the package's young age and recent release history partly compensate for this lack of adoption data.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest project-hygiene gap.

Security policy

The repository has no security policy, which reduces transparency about how vulnerabilities should be reported and handled.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings, but both of its action references are unpinned, weakening build reproducibility and update integrity.