inlayphp/two-factor-authentication

Release historycaution

The package is only 36 days old, despite 25 releases and 15 releases in the last 12 months. Its median release interval is about 2 hours, which shows activity but provides little evidence of a settled maintenance pattern.

Repo bus factorcaution

One contributor made all 17 commits in the last 3 months. Organization ownership provides some handoff capacity, but no second active contributor is shown, so the concentration remains a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For an authentication package, that is a meaningful security-maintenance gap.

Security policycaution

The repository has no security policy. For a package handling TOTP secrets and recovery codes, this weakens vulnerability-reporting transparency.

Version stabilitycaution

Version v0.3.24 is not a stable major release, so compatibility may still change. It is not marked as a prerelease, which offers some compensation.