The package includes a substantial artifact, README, tests, changelog, and no install-time scripts. Its single maintainer, 15 runtime dependencies, and unavailable source verification increase adoption and maintenance risk.
45%
Total Score
50
50
70
100
The package has 85 releases since July 2020, but no releases in the last three years; that prolonged inactivity is a strong abandonment concern.
The package declares 15 runtime dependencies, including several cryptography, blockchain, and networking libraries; this creates a broad compatibility and transitive-maintenance surface.
Only one registry account has publish access. That does not prove inactivity, but it creates a meaningful bus-factor and release-continuity concern alongside the long release gap.
Version 0.14.04 is not a prerelease, which is positive, but the unreached stable major version leaves less compatibility confidence for a long-lived dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
grpc/grpc Version ~1.30.0 | — | — |
mdanter/ecc Version ~0.5.2 | — | — |
bitwasp/bech32 Version ^0.0.1 | — | — |
web3p/web3.php Version 0.1.6 | — | — |
bitwasp/bitcoin Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.