devixel/hmac-security

Release historydanger

The package has had no release in about four years and none in the last 12 months, despite six releases shortly after its September 2022 launch. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided signal shows ongoing maintenance capacity.

Repo popularitycaution

The repository has 1 star, 0 forks, and 2 watchers. Popularity is only supporting evidence, but these low figures provide little evidence of broad review or community support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a standalone adoption blocker.

Security policycaution

The repository has no security policy. For a package handling HMAC request validation, this weakens the documented path for reporting security issues, though it does not by itself establish a security defect.