yubico/u2flib-server
Unfit to use for a new dependency: the package is marked abandoned, its repository is archived, and the last release was in September 2018. The source is well documented and licensed, but there is no recent maintenance to support a security-sensitive U2F library.
15%
Total Score
50
100
56
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk for a dependency intended to handle authentication.
The package has had no release in more than seven years, with zero releases in the last 12 months. That strongly indicates abandonment for a security-sensitive library.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.
The linked Yubico repository is archived, indicating the project is no longer actively maintained even though it was last pushed in July 2022.
The linked repository name does not exactly match the package name and its README does not mention the package, creating some uncertainty about package-to-repository alignment. The matching Yubico organization and repository URL provide partial context but do not remove the gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 paragonie/random_compat Version >= 1 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.