Usable with caveats: the package is clearly structured, licensed, tested, and backed by a matching organization repository, but maintenance appears to have stopped several years ago. Adopt it only if you can accept limited evidence of ongoing fixes or compatibility work.
58%
Total Score
50
50
72
88
Although five releases arrived in a short initial period, the latest release was in April 2022 and there have been no releases in the last 12 months, leaving compatibility and defect fixes unverified for more than four years.
There were zero commits and zero active maintainers in the last three months, consistent with the release gap and raising a substantial abandonment and compatibility risk.
The package has five runtime dependencies, including SilverStripe, Twilio, OTP, and phone-number libraries. This is a meaningful compatibility surface for an old release, though the dependency set is relevant to the package's stated functionality rather than unnecessarily broad.
One issue and one pull request remain open, while none were opened or closed in the last month; this adds to the picture of an inactive project but is not severe on its own.
The repository has only 3 stars and 4 forks, indicating a small user base and limited community validation. Low popularity is supporting evidence rather than a decisive health problem for a small specialized module.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twilio/sdk Version ^6.35 | — | — |
silverstripe/mfa Version ^4.0 | — | — |
spomky-labs/otphp Version ^10 | — | — |
giggsey/libphonenumber-for-php Version ^8.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.