khanifzyen/yii2-otp

Release historydanger

The package has made no release in nearly three years and has had no releases in the last 12 months, despite five total releases. This is meaningful abandonment risk for a library, although the stable 2.0.0 version reduces version-churn concerns.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent activity showing active maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little community evidence to compensate for the inactive maintainer profile. Popularity is only supporting evidence, but this provides no additional confidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest oversight concern in an authentication-related package, while the build tooling provides some project structure.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations unclear. This is a maintenance and transparency gap, though it is less serious than confirmed insecure workflow behavior.