phpdot/totp

This is a usable but early-stage package with good basic transparency and repository alignment: it is MIT-licensed, non-deprecated, actively pushed recently, has a matching repository with comprehensive source-level tests, and uses a small runtime dependency profile with no install lifecycle scripts. The main concerns are its short 53-day history, only three releases, pre-1.0 versioning, complete concentration of recent commits in one contributor, no repository security policy or security-scanning tooling, and minimal external adoption evidence. Organization ownership and the repository's test coverage partly offset the single-contributor and artifact-hygiene concerns, but this release should be adopted with normal review and monitoring rather than treated as mature infrastructure.

Latest v0.3.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Omar Hamdan

Direct Dependencies

Dependency	Last Release	Score
psr/clock Version ^1.0	—	—