Provides TOTP and QR codes for use with an authenticator like the one from Google or Authy
59%
Total Score
caution
Usable with caveats: no releases since September 2023 and no recent commit activity.
Only two releases exist, with none in the last 12 months and the latest published in September 2023. This indicates materially slowed maintenance for a package developers may rely on for authentication.
There were zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last year, this raises maintenance and abandonment risk.
The repository has only 8 stars and 8 forks, indicating limited adoption evidence. Popularity is supporting information, so this adds only modest uncertainty rather than determining the score.
Composer is used for the build, but no security-scanning tools are configured. The missing scanning is a hygiene gap for an authentication-related package.
The repository has no security policy. For a package implementing two-factor authentication, this reduces transparency around vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
pragmarx/google2fa Version ^8.0 | — | — |
bacon/bacon-qr-code Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.