Hi,
Is anyone (still) using this in production? It appears to be the most popular django passwordless / magic link package, but multiple security risks/improvements do not seem to get resolved: merging PR #86 (or #63) or integrating rate limiting / limited attempts (#100)?

(I found an earlier topic on this, where @aaronn indicated he was open to PR's, so I wonder if that got outdated?
#98 (comment)