runelaenen/shopware6-two-factor-auth
The project has a clear README, matching license, and release notes for this version. Recent repository activity is quiet, and the workflow uses broad permissions with all three actions unpinned; there is also no security policy.
66%
Total Score
67
100
100
67
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful sign that maintenance may currently be paused.
No issues or pull requests were opened or merged in the last month, reinforcing the quiet recent activity, though open issues and pull requests show the project is not abandoned outright.
The repository has no published security policy, which leaves vulnerability reporting and response expectations unclear for a security-sensitive authentication plugin.
The single workflow grants top-level write permissions and all 3 of 3 action uses are unpinned. The audit found no untrusted checkout, script injection, or high-confidence findings, so this is a hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kraftware |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 shopware/core Version ~6.7.0 | — | — |
pragmarx/google2fa Version ^8.0 | — | — |
bacon/bacon-qr-code Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.