cinexpert/phpseclib
PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.
42%
Total Score
100
71
50
Health Score Breakdown
The package is 1,404 days old, has had no release in the last 12 months, and its latest recorded release was in November 2022. That is a substantial maintenance and abandonment concern despite 88 total releases.
The repository is not archived, which is positive, but it was last pushed in November 2022. The absence of recent repository activity reinforces the stale release history.
No repository security policy was found. For a cryptographic communications library, that is a meaningful transparency and vulnerability-reporting gap.
The assessed version is a stable 3.0.17 release rather than a prerelease, which supports predictable adoption. However, the recorded latest version is 2.0.40, an inconsistency that reduces confidence in the registry metadata.
The single workflow was fully analyzed with no detected dangerous sinks or audit findings, but all six action references are unpinned. That weakens build reproducibility and supply-chain hygiene without making the release unfit on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jim Wigginton |
| Patrick Monnerat |
| Andreas Fischer |
| Hans-Jürgen Petrich |
| Graham Campbell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 paragonie/random_compat Version ^1.4|^2.0|^9.99.99 | — | — |
paragonie/constant_time_encoding Version ^1|^2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.