rikudou/google-authenticator

Release historycaution

This package has only one release, published over 8 years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance, although a small stable library may not need frequent releases.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little external evidence of adoption or community oversight. Popularity is supporting evidence rather than a decisive health measure.

Repo toolingcaution

Composer is used for the project build, but no security scanning tooling is present. For this small package, the missing scanning automation is a modest transparency gap rather than a severe risk.

Repository archivedcaution

The repository is not marked archived, but its last push was over 8 years ago. The unarchived status is a compensating signal, yet the long period without repository activity remains a maintenance concern.

Security policycaution

The repository has no security policy, leaving no documented process for reporting vulnerabilities. This matters for an authentication-related library, even though the package is small and dormant.