robthree/twofactorauth
Usable with caveats: this is a mature, licensed package with a matching repository, tests, release notes, and no deprecation or workflow hazards. Recent repository activity has stopped, and the project lacks a security policy and explicit workflow token permissions.
72%
Total Score
50
100
94
67
Health Score Breakdown
There were no commits or active maintainers in the last three months. This is a meaningful maintenance concern, though the recent release and historically long release interval partly explain the quiet period.
The repository uses Composer, but no security-scanning tool was detected. That weakens visible security-process transparency without indicating that the package is unsafe.
No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.
All three analyzed workflows lack top-level token permissions declarations. No workflows request top-level write access, but the missing explicit permissions reduce CI permission transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rob Janssen |
| Nicolas CARPi |
| Will Power |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.