web-auth/webauthn-lib

Dependency profilecaution

The package has 17 runtime dependencies, including cryptographic, serialization, and framework components. This is a meaningful dependency surface to monitor, but the signal does not show an excessive or clearly anomalous profile on its own.

Package scaffoldingcaution

The artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. For a security-sensitive library, the absence of repository tests and release-history documentation is a genuine maintenance and transparency gap.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This conflicts with the strong release history and same-day push, but still indicates a recent collapse in observable development activity that warrants caution.

Repo issue activitycaution

There were no new issues or pull requests in the last month and no merged pull requests; this is neutral to mildly concerning, but the open-issue count is unknown and the signal alone does not establish abandonment.

Repo toolingcaution

Composer is used as the build tool, supporting reproducible ecosystem-native packaging, but no security scanning tools are configured; for authentication code, that is a meaningful hygiene gap.