turahe/otp

Release historycaution

Four releases were published in the last 12 months, showing initial release momentum, but the latest registry release was in November 2025 for a package that is 344 days old.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful sign that maintenance has slowed.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this provides little external evidence of adoption.

Security policycaution

No SECURITY.md policy was found, leaving vulnerability reporting and response expectations undocumented for a package used in authentication-related flows.

Workflow auditcaution

All 27 analyzed Actions references are unpinned, weakening build reproducibility. The audit also found high-confidence bot-condition findings and a low-confidence cache-poisoning pattern; no untrusted checkout or script-injection sink was found, so these are hygiene concerns rather than a standalone severe risk.