costa92/hasher

Release historydanger

The package has only one release, published about nine years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency, despite the package remaining available.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a mature user or contributor base.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. For a small package this is a modest transparency and maintenance weakness, not a severe risk by itself.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting expectations unclear and modestly lowers transparency.