driehle/php-crypt-md5

Release historycaution

The package has 8 releases over more than 13 years, but none in the last 12 months and the latest release was about 21 months ago. This indicates a mature but currently inactive maintenance pattern.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with the long gap since the latest release. This reduces confidence that new compatibility or maintenance issues will be addressed promptly.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a small PHP utility this is a meaningful transparency gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and remediation expectations unclear, adding a modest maintenance concern for a dependency.

Token permissionscaution

The single workflow does not declare top-level token permissions. No write permissions or other dangerous workflow behavior were observed, so this is a minor configuration gap rather than a severe risk.