ralffreit/mfa-email

Project backingcaution

The package is backed by an individual repository owner rather than an organization, so the single registry maintainer is consistent with the project structure but leaves limited visible organizational redundancy.

Release historycaution

The package has existed for about 3 years 7 months with 9 releases and 2 releases in the last 12 months, showing continued publishing but a relatively slow median interval of about 138 days.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although the repository was recently pushed and the release includes security-fix notes, the current lack of ongoing activity lowers confidence in sustained maintenance.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. This is a meaningful hygiene gap for an authentication-related extension, despite the presence of basic build tooling.

Security policycaution

The repository has no security policy. For an extension handling multi-factor authentication, this weakens vulnerability-reporting transparency and increases maintenance risk.