digitaldonkey/ecverify
The package is small and clearly documented, with tests and a matching MIT license. Its source remains available, but limited security tooling and a narrow maintenance record add adoption risk.
58%
Total Score
50
75
50
Health Score Breakdown
The package has only one release, published about eight years ago, with no releases in the last 12 months. This substantially weakens confidence that the registry version receives ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. A push in November 2024 shows it is not completely abandoned, but recent maintenance capacity remains weak.
Two issues and two pull requests remain open, with no issues or pull requests closed in the last month. This supports the concern that current maintenance is limited.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap for a cryptographic library.
The repository has no security policy. For a library handling Ethereum signature recovery, the absence of a documented vulnerability-reporting path is a meaningful gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Thorsten Krug |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 kornrunner/keccak Version ^1.0 | — | — |
simplito/elliptic-php Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.