Usable with caveats: the release is well documented, tested, licensed, and backed by an active organization, but it is brand new with only two releases and no established commit history. Review it carefully before relying on it for production transaction signing.
68%
Total Score
67
100
75
80
Only one registry account has publish access, which is a concentration risk, although the organization-owned repository provides some backing context.
This package is less than one day old and has only two releases, so there is little evidence of long-term maintenance or release stability.
There were no commits from active maintainers in the last three months, but the repository was pushed recently and recorded two merged pull requests; because the project is less than one day old, this is an early maturity concern rather than abandonment evidence.
The repository has zero stars, forks, and watchers, offering no community validation; for a package released less than one day ago this is expected, but it leaves adoption evidence unavailable.
Composer build tooling is present, but no security scanning tools were detected, leaving automated security hygiene less visible.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brick/math Version ^0.11 || ^0.12 || ^0.13 || ^0.14 | — | — |
cardano-php/bech32 Version ^1.1 | — | — |
spomky-labs/cbor-php Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.