nails/module-multi-factor-auth

Release historycaution

Only one release was published, on March 1, 2023, with no releases in the last 12 months. Recent repository commits provide some compensating maintenance evidence, but the published package is notably stale.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. Other security tooling partly offsets this transparency gap but does not replace a policy.

Version stabilitycaution

Version 0.1.0 is an early, non-stable-major release, which signals API-change risk even though it is not marked as a prerelease.

Workflow auditcaution

All nine analyzed action references are unpinned, and the audit reports two high-confidence template-injection findings in a workflow. The absence of untrusted checkouts and script-injection findings keeps this as a hygiene concern rather than a severe standalone risk.