jtargosz/laravel-action-otp

Release historycaution

This is the package's first release, published 0 days ago, so there is no release track record to demonstrate sustained maintenance. Its complete initial artifact provides some compensating evidence, but not long-term confidence.

Repo commit activitycaution

The repository shows 0 commits and 0 active maintainers in the last 3 months, but the package is only 0 days old. This limits evidence of ongoing maintenance rather than proving abandonment.

Repo popularitycaution

The repository has 1 star, 0 forks, and 0 watchers. For a package released 0 days ago this is mainly a lack of supporting adoption evidence, not a severe concern by itself.

Security policycaution

No repository security policy was found, leaving disclosure and response expectations undocumented. This is a modest transparency gap for a package handling one-time authentication codes.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings, and it has no broad top-level write permission. Both action references are unpinned, which creates a build-hygiene weakness.