jackmartin/laravel-webauthn

Registry deprecationdanger

Packagist marks the entire package as abandoned and names laravel/passkeys as its replacement. This is a direct adoption concern beyond a release-specific warning.

Release historycaution

The package has only 2 releases over 783 days, with 1 release in the last 12 months and a median interval of about 662 days. The recent release partly offsets the sparse history but does not show active cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. Although the latest release was published recently, current maintenance capacity is not demonstrated.

Security policycaution

No security policy was found in the repository. For an authentication package, the absence reduces vulnerability-reporting transparency.

Workflow auditcaution

The single workflow has no untrusted checkout or injection findings, but all 11 action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene gap.