bentools/shh

Tests, a clear README, and a focused dependency set support straightforward adoption. The single-maintainer project has no recent activity or security tooling, so pinning this release carries ongoing maintenance risk.

Latest 1.1

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published over five years ago, and there were no releases in the last 12 months. Its earlier release cadence was active, but the long gap indicates substantial abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no recent maintenance.

Project backing

The repository is owned by an individual account rather than an organization. This does not establish a problem by itself, but it provides no organizational backing to offset the stale activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a library handling encrypted secrets, this is a meaningful maintenance and transparency gap.

Security policy

The repository has no security policy, leaving no documented path for reporting vulnerabilities or explaining security handling for this secrets library.