Pure C# implementation of the Elliptic Curve Digital Signature Algorithm (ECDSA) by Stark Bank
58%
Total Score
75
100
88
75
The package has 9 releases but none in the last 12 months, with the latest release nearly five years ago; this indicates materially reduced maintenance activity.
There were zero commits and zero active maintainers in the last three months, reinforcing the long release gap and increasing abandonment risk.
There were no new or merged issues or pull requests in the last month, with open work still present; this is consistent with limited current maintenance.
The repository reports no build tooling and no security scanning tools, leaving weaker automated assurance for a cryptographic library.
The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities in a security-sensitive package.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10557 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. starkbank-ecdsa is vulnerable to Improper Verification of Cryptographic Signature in versions 0.0.1 - 1.3.2. | 0.0.1 - 1.3.2 | Medium |
CVE-2021-43569 starkbank-ecdsa is vulnerable to Improper Verification of Cryptographic Signature in versions 0.0.0 - 1.3.2. | 0.0.0 - 1.3.2 | Critical |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
netstandard.library Version [1.6.1, ) | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.