stefan-z/laravel-totp

Maintainerscaution

The registry lists one publishing maintainer. That is a thin publishing base for continuity, although the repository ownership is also identified as a user account rather than an unknown publisher.

Release historycaution

The package has only three releases, with none in the last 12 months; its latest release was published about two years ago. This indicates limited and currently inactive release maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with no repository updates since September 2024. This materially raises the risk of abandonment or delayed fixes.

Security policycaution

The linked repository has no security policy. For a package that generates and validates authentication tokens, this weakens the documented path for reporting security issues.

Version stabilitycaution

Version 0.0.3 is not a stable-major release, so the public API may still change. The release is not marked as a prerelease, which provides some compensation.