dazza-dev/dgt-cr-signer
Documentation is clear and the dependency surface is small. The project has little demonstrated maintenance capacity so far, while security and testing practices remain limited.
60%
Total Score
50
100
86
75
Health Score Breakdown
The package is about ten months old but has only one release, so there is not enough release history to demonstrate sustained maintenance. Its stable v1.0.0 status provides some maturity, but does not offset the limited track record.
The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived and was pushed after the release, but current maintenance activity is still unproven.
Composer is used for the build, but no security-scanning tooling is present. This is a modest supply-chain hygiene gap rather than evidence that the release is unsafe.
The linked repository has no security policy. This is a transparency and reporting gap, though it is less severe for a small package with no observed dangerous workflow activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andres Daza |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.9 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.