The package is licensed, tested in its repository, and has no install-time scripts. One maintainer, no security policy, and no observed commit activity increase the risk of slow support and unattended issues.
58%
Total Score
50
100
83
75
Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.
The package has made 8 releases, but none in the last 12 months; its latest release was over 3 years ago, indicating a prolonged maintenance gap.
There were no commits and no active maintainers in the last 3 months, reinforcing the longer release-history gap and raising abandonment risk.
The repository has 1 star and no forks, providing little community evidence or external support; popularity is only supporting evidence, so this is a modest concern.
Composer build tooling is present, but no security scanning tools were detected, leaving security-maintenance practices less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
paragonie/halite Version ^5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.