thefunpower/two-factor

Dependency profilecaution

The package has two runtime dependencies and no dev dependencies. This is a modest dependency surface, though the absence of development dependencies also provides little evidence of a maintained test workflow.

Release historycaution

Only three releases were published, all within January 2024, with no release in over two years; this is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the package's long release gap and raising abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Repository archivedcaution

The repository is not archived, but its last push was in January 2024, so the non-archived status does not offset the observed inactivity.