Some bugs were found recently in the package
The main one was that the generated tokens were never expiring. Also, there wasn’t a way to provide the options
You can also check how to provide those options here.
If you’re using this package on your app, it’s extremely important that you update it.
You can do that just by running
meteor update accounts-base accounts-passwordless.