byphp/secp256k1

The package includes tests, a README, release notes, and a matching MIT license. Its small dependency set and lack of install-time scripts reduce integration risk, but it has no security policy and all seven workflow actions are unpinned.

Latest 1.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published about 2 years and 3 months ago, with no releases in the last 12 months. That provides little evidence of ongoing maintenance.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months. Combined with the single-release history, this indicates limited recent maintenance.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide no community signal to offset the thin maintenance history.

Security policy

The repository has no security policy. For a cryptographic library, this is a meaningful transparency gap because it gives users no documented reporting path.

Workflow audit

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings, which is positive. However, all 7 of 7 action references are unpinned, leaving avoidable build-integrity hygiene risk.