nanasess/twofactorauth18
The package has a clear MIT license, repository tests, and no install-time scripts. Its workflows have no detected dangerous sinks, but all nine actions are unpinned, reducing build reproducibility.
62%
Total Score
50
100
92
67
Health Score Breakdown
The package has 24 releases but none in the last 12 months, and the latest release is roughly 21 months old. This suggests maintenance has stalled, although the release history shows prior publishing activity.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance activity is absent.
The repository has no security policy, which makes vulnerability-reporting expectations and response procedures less transparent. This is a moderate documentation gap rather than evidence of an unsafe release.
All three workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all nine action references are unpinned, leaving dependency versions less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rob Janssen |
| Nicolas CARPi |
| Will Power |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.