litstack/2fa

Tests, a clear MIT license, and organization backing provide useful maintenance foundations. The workflow is basic but has no detected audit findings; its unpinned actions and the lack of security tooling still weaken reproducibility.

Latest v1.0.3

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only four releases and none in roughly five years, despite a stable v1.0.3 release. This is strong evidence of a stalled project rather than an actively maintained dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the repository having stopped receiving updates for about five years. This materially raises abandonment risk.

Repo issue activity

There are two open issues but no new or closed issues and no pull requests in the last month. The small issue load is not severe, but the absence of current activity reinforces the maintenance concern.

Repo popularity

The repository has one star and two forks, indicating a very small user and contributor footprint. Popularity is supporting evidence only, but this leaves limited external maintenance capacity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That is a hygiene gap for a security-sensitive 2FA package, though it is not evidence of a defect by itself.