truesocialmetrics/google-authenticator

Package scaffoldingdanger

The package includes a README and tests, but the README explicitly marks this package as deprecated and directs users to a replacement. That is a direct adoption warning despite the otherwise useful documentation.

Release historydanger

The package has only four releases and none in the last six years; its latest registry release was in April 2020. This strongly indicates abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository being unarchived does not compensate for the absence of current activity.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. For an authentication-related library, this is a meaningful transparency gap.