mygento/module-two-factor-auth

Release historydanger

This is the package's only release, published about 4 years ago, with no releases in the last 12 months. That gives little evidence of continued maintenance for a Magento extension.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the release history and indicating a serious abandonment risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although this can occur with subpackages, the missing README reference weakens confidence that the repository clearly represents this package.

Security policycaution

The linked repository has no security policy. For an authentication-related Magento module, this is a meaningful transparency and vulnerability-reporting gap.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted triggers, but all 3 of its action references are unpinned. That leaves the build exposed to changing action contents.