vormkracht10/filament-two-factor-auth

Registry deprecationdanger

Packagist marks the entire package as abandoned, which is a severe adoption risk even though the listed replacement has the same package name.

Release historydanger

The latest release was about 15 months ago, with no releases in the last 12 months. Although the package has 74 releases overall, the recent release gap indicates a substantial slowdown.

Repo commit activitydanger

The repository recorded zero commits from any active maintainer in the last three months, reinforcing the evidence of stalled maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether it is the intended source despite the otherwise plausible project context.

Workflow auditcaution

All 12 analyzed action references are unpinned, three workflows grant top-level write access, and a high-confidence audit finding reports spoofable actor conditions in the Dependabot auto-merge workflow. The workflows were fully analyzed and no untrusted checkout or script-injection sink was found, which limits but does not remove the hygiene risk.