The source tree is small and focused, with organization ownership and no install-time scripts. Ongoing maintenance is difficult to establish, so pinning this release carries substantial adoption risk.
38%
Total Score
83
100
67
83
There has been only one release, published in December 2019, with no releases in the last 12 months; this is strong evidence of a potentially abandoned dependency.
The package declares no license, contains no license file, and the repository has no license file, leaving the legal terms for reuse unclear.
The package has no README, while tests and a changelog are not expected in published PHP artifacts; the missing consumer documentation still makes integration harder.
One issue remains open and there has been no issue or pull-request activity in the last month, consistent with the absence of recent releases.
The repository has zero stars and zero forks, with only one watcher; popularity is supporting evidence, but these values provide little external evidence of maturity or active use.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
paragonie/halite Version ^4.5 | — | — |
paragonie/ciphersweet Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.