rawilk/laravel-webauthn

Release historydanger

The package has had no registry release in the last 12 months, despite a median release interval of about 33 days historically. That is a meaningful sign of slowing maintenance for a security-focused authentication library.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months. Combined with no registry releases in the last year, this indicates a substantial maintenance gap.

Project backingcaution

The registry namespace and repository are owned by the same individual account, so the package has identifiable ownership but no demonstrated organizational backing. Given the observed inactivity, this leaves limited visible maintenance capacity.

Repo issue activitycaution

There were no new or merged pull requests in the last month, with one open issue and five open pull requests. This is consistent with paused maintenance and leaves pending work unresolved.

Workflow auditcaution

All five workflows were analyzed, but all 11 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently severe.