web-auth/webauthn-stimulus

Registry deprecationdanger

Packagist marks the entire package abandoned and names a replacement, which is a major adoption and continuity risk despite recent releases.

Repo commit activitycaution

The linked repository recorded no commits and no active maintainers in the last three months, weakening the maintenance picture despite the recent registry release.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, so the package-to-source relationship is less transparent; organization backing partly offsets this concern.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected, leaving a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for an authentication-related package.