Package Health/yiirocks/voyti-2fa-webauthn

yiirocks/voyti-2fa-webauthn

This release appears usable and reasonably well-backed, with a valid BSD-3-Clause license, stable non-prerelease versioning, an active non-archived repository, repository tests and changelog coverage, security scanning, and no install-time lifecycle scripts. The main concerns are that the package is only 13 days old, all nine recent commits come from one contributor, the repository has no observed adoption activity, and both GitHub Actions workflows omit top-level token permissions. The YiiRocks organization provides some backing for the concentrated maintainer base, but the package remains young and should be adopted with normal review and upgrade monitoring.

Latest 1.0.3

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 13 days old with four releases and a median interval of about 3 days, showing active initial development but providing little evidence of long-term maintenance.

Repo bus factor

One contributor made all nine commits in the last three months, creating a genuine bus-factor concern; organization ownership provides some potential handoff capacity but does not remove the observed concentration.

Repo popularity

The repository has zero stars and forks and one watcher, providing no meaningful external adoption signal; this is a supporting caution rather than a standalone health verdict for a new package.

Token permissions

Both workflows omit top-level token permissions, leaving workflow token scope less explicit than recommended even though no workflow declares top-level write access.