kuhschnappel/authtoken
The package is small and focused, with a clear README, stable version, and matching source repository. Limited security tooling and a one-person maintainer base leave less evidence of ongoing support.
58%
Total Score
50
100
83
50
Health Score Breakdown
A post-autoload-dump install script runs during Composer installation, adding execution behavior that deserves attention even though the signal does not show harmful activity.
Only one registry account has publish access, leaving limited publishing redundancy; the user-owned repository provides some direct ownership context but does not remove the single-person continuity risk.
The source repository is owned by an individual rather than an organization, so there is no shown organizational backing to compensate for the thin maintainer base.
The package has 13 releases, but none in the last 12 months and the latest release was nearly two years ago, which weakens evidence of active maintenance.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mike Zimmer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typo3/cms-core Version ^11.5 || ^12.4 || ^13.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.