cherednichenkoa/mcrypt-polyfill

Release historydanger

The package has only two releases, both from December 2018, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency still being adopted today.

Package scaffoldingcaution

The artifact has no README, tests, or changelog, while the linked repository also reports no tests or changelog. Missing tests and changelog are normal for published artifacts, but the absent README reduces consumer transparency for this integration package.

Repo package mentioncaution

The linked repository name does not match the package name, and no README mention was available. Although name differences can occur in subpackages, the lack of a matching reference leaves some uncertainty that the repository is the package's intended project home.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no visible community or adoption signal to offset the long inactivity.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools are reported. This is a modest transparency gap rather than evidence that the package is unsafe.