implementation of crypto for the browser
61%
Total Score
75
83
75
The package has 77 releases and a long history, but no release has appeared in nearly two years, which raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months, indicating currently inactive development.
No build tool or security scanning tool was detected, leaving the project with limited visible automated security and build safeguards.
No type declarations are included, which is a consumer-ergonomics gap for TypeScript users but not evidence of abandonment or unsafe maintenance.
All five workflows were analyzed with no detected audit findings and no untrusted checkout or script-injection sinks, but all five action references are unpinned, weakening reproducibility and update safety.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pbkdf2 Version ^3.1.2 | — | — |
inherits Version ^2.0.4 | — | — |
hash-base Version ~3.0.4 | — | — |
randomfill Version ^1.0.4 | — | — |
create-ecdh Version ^4.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.