The package has a long release history and a fresh stable release, with source tests and clear licensing. Current activity is quiet, the project has one maintainer, and it lacks a security policy.
63%
Total Score
50
100
89
75
Only one account has registry publishing access. That is a narrow operational base and increases continuity risk for a personal project.
There were no commits and no active maintainers in the last 3 months. This indicates currently inactive development, although the recent registry release partly offsets abandonment concern.
The repository has 1 star, 0 forks, and 1 watcher. Low adoption is supporting evidence of limited external validation, though it is not decisive by itself.
Composer is used for the build, but no security scanning tools are present. The missing scanning is a modest transparency and maintenance concern.
The repository has no security policy. For a library containing encryption, upload, networking, and security utilities, this leaves vulnerability-reporting expectations unclear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.