novactive/ez2fabundle

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the release was published recently, the absence of recent development activity raises maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a two-factor-authentication bundle, that is a meaningful security-process gap.

Security policycaution

The repository has no security policy. For a package handling authentication, this weakens vulnerability-reporting transparency and response expectations.

Workflow auditcaution

Both workflows were analyzed without high- or medium-severity findings and use no untrusted checkout or script-injection paths. However, both action references are unpinned, leaving their exact versions mutable.