Package Health

dexcedu/sign

It has a clear MIT license and a small dependency set. The single-file package has no tests or README, while its repository has been inactive since November 2023 and does not clearly identify this package.

Latest 1.0PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

57

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historydanger

This is the only release, published on November 21, 2023, with no releases in the following 34 months. That long absence of release activity is a substantial maintenance concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged lack of releases and raising abandonment risk.

Package file treecaution

The artifact and repository each contain only composer files and src/Sign.php. This is a very minimal project surface for a cryptographic library and provides little transparency for consumers.

Package scaffoldingcaution

The package has no README, tests, or changelog, although tests and changelogs are not expected in published artifacts. The missing README still reduces consumer documentation for a library, while the GitHub release for this version is a modest positive.

Repo package mentioncaution

The linked repository is named walletverify rather than dexcedu/sign, and no README package mention was available. A sub-package explanation is possible, but the repository's ownership of this package is not clear.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

HB

Direct Dependencies

DependencyLast ReleaseScore
kornrunner/secp256k1
Version ^0.2.0
simplito/elliptic-php
Version ^1.0

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform