wq2010feng/thinkphp-otp

Maintainerscaution

Only one user account has registry publish access, and the project backing is an individual rather than an organization. This creates a thin publishing and continuity base, although the linked repository matches the package.

Release historycaution

The package has had no releases in more than four years, despite five releases being published during its first few months. This is a meaningful sign of inactivity for a security-related authentication utility.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being in May 2022. The stable, tiny codebase may need little change, but there is no recent evidence of maintenance capacity.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling was detected. The absence of scanning is a modest hygiene weakness rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented route for reporting or handling vulnerabilities. This is a transparency gap for an authentication package.