EC cryptography
67%
Total Score
50
86
83
The package has existed for 4531 days with 88 releases, but it has had no releases in the last 12 months; this supports maturity while indicating a current maintenance pause.
There were zero commits and zero active maintainers in the last three months, consistent with the lack of releases in the last 12 months and raising abandonment risk.
Only one issue was opened and no issues or pull requests were closed or merged in the last month, suggesting limited current project responsiveness.
The repository uses a build tool, but no security scanning tools were detected; for a cryptography library, that is a meaningful security-maintenance gap.
No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.
| Title | Versions | Severity |
|---|---|---|
CVE-2025-14505 elliptic is vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in versions 0.0.0 - 6.6.1. | 0.0.0 - 6.6.1 | Medium |
CVE-2024-48948 elliptic is vulnerable to Improper Verification of Cryptographic Signature in versions 0.0.0 - 6.6.0. | 0.0.0 - 6.6.0 | Medium |
CVE-2024-48949 elliptic is vulnerable to Improper Verification of Cryptographic Signature in versions 0.0.0 - 6.5.6. | 0.0.0 - 6.5.6 | Medium |
CVE-2024-42461 elliptic is vulnerable to Improper Verification of Cryptographic Signature in versions 5.2.1 - 6.5.6. | 5.2.1 - 6.5.6 | Medium |
CVE-2024-42460 elliptic is vulnerable to Improper Handling of Length Parameter Inconsistency in versions 2.0.0 - 6.5.6. | 2.0.0 - 6.5.6 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
bn.js Version ^4.11.9 | — | — |
brorand Version ^1.1.0 | — | — |
hash.js Version ^1.0.0 | — | — |
inherits Version ^2.0.4 | — | — |
hmac-drbg Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.