laragear/two-factor

Release historycaution

The package has existed for about four years with 17 releases and a median interval of about 50 days, but only one release appeared in the last 12 months, suggesting a slower recent cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern despite the recent release.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented for a security-sensitive authentication package.

Workflow auditcaution

The workflow audit found no dangerous triggers, untrusted checkouts, script injection, or high-confidence findings, but all 11 action references are unpinned, weakening build reproducibility and supply-chain control.