Is devise-two-factor safe to use?

devise-two-factor has no known vulnerabilities on the latest version (6.4.0). DepScope rates its health at 73/100 (moderate risk).

What is the latest version of devise-two-factor?

The latest version of devise-two-factor is 6.4.0, released 2026-02-02.

No known vulnerabilities on the latest version of devise-two-factor.

No, devise-two-factor is actively maintained. Latest release: 6.4.0 (2026-02-02).

Popular alternatives to devise-two-factor in RubyGems include: jmespath, netrc, thread_safe, crass, tzinfo.

devise-two-factor is licensed under MIT.

rubygemsv6.4.0

Devise-Two-Factor is a minimalist extension to Devise which offers support for two-factor authentication through the TOTP scheme.

License MITpermissive20 versions4 deps342,805 weekly dl

/ 100

Health

safe to use

[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

20/25

maintenance

14/20

popularity

25/25

security

9/15

maturity

5/15

community

Vulnerabilities

none known

Dependencies (4)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/rubygems/devise-two-factor