mix-code/filament-multi-2fa

Release historycaution

The package has six releases, but none in the last 12 months; its latest release was over a year ago. This is meaningful abandonment risk despite the earlier rapid release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially lowers confidence in ongoing maintenance.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tool was detected. That leaves a useful supply-chain hygiene gap for a package handling authentication features.

Workflow auditcaution

All eight action references are unpinned, and two of three workflows grant top-level write permissions. No untrusted checkout or script-injection paths were found, so this is a hygiene concern rather than a severe workflow risk.