It has a clear README, a complete 11-file artifact, and no install-time scripts. The GPL declaration conflicts with the GPL-3.0 license file, so confirm compatibility before adoption.
55%
Total Score
50
100
83
83
The artifact includes a COPYING file and the repository also has a license file, so licensing is documented. However, the manifest declares GPL-2.0-or-later while the detected file is GPL-3.0, creating a compatibility question.
This is the only release, published about 2 years and 3 months ago, with no releases in the last 12 months. That leaves long-term maintenance uncertain, although a small extension may have limited release needs.
The repository has had 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. The repository is not archived, but there is no recent activity to show ongoing maintenance.
The repository has no security policy. This is a modest transparency gap for a web authentication extension, though the available evidence does not show an active security problem.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version ~1.0|~2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.