Security issue - missing packagist release

[spaze]

trafficstars

Packagist phpgangsta/googleauthenticator is missing a 1.0.1 release.

After asking the author to add it, I got this reply:

I would like to, but someone else took the packagist namespace "phpgangsta". I will have to contact him, so he can add me as a maintainer or so.

This means the author doesn't control Packagist releases, someone else does, and this security lib probably should not be used.

Due to the missing release

composer install phpgangsta/googleauthenticator

fails with

Could not find package phpgangsta/googleauthenticator at any version for your minimum-stability (stable). Check the package spelling or your minimum-stability

Please take control of the Packagist namespace and add a release so that it can be installed using composer without specifying dev-master version (see #45).

Thank you.

[krynble]

Having same issue here. Can't install using composer.

[vzool]

Install it by this way:

composer require phpgangsta/googleauthenticator:dev-master

Hope its help you.

[willpower232]

If you would like a composer-installable similar library have a look at https://github.com/RobThree/TwoFactorAuth which is apparently an improvement on this library.

[RSpeekenbrink]

Bump (Still an issue)

[eightyfive]

Thanks @willpower232.

Can't believe this library has 1.6k stars and not a stable release published on packagist... 🤦‍♂