Package Health/gamblingtec/certified-rng

gamblingtec/certified-rng

Usable with caveats: the release is licensed, documented, non-deprecated, and backed by a matching organization repository. However, the repository has had no commits or active maintainers in the last three months, with only one release in the past year and no security policy.

Latest 2.0.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 7 years and has 10 releases, but only one release appeared in the last 12 months; this suggests a slow maintenance cadence for a library used in regulated software.

Repo commit activity

There were no commits and no active maintainers in the last three months, a meaningful sign of currently inactive maintenance. The recent January release partly offsets this, but does not demonstrate ongoing development.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently unhealthy, but it provides little evidence of active community maintenance.

Repo popularity

The repository has only 2 stars, 3 forks, and 1 watcher, indicating limited external adoption or review. Popularity is supporting evidence, so this lowers confidence more than it determines the verdict.

Repo tooling

Composer is used for the build, but no security scanning tools are present. The missing scanning is a transparency and maintenance gap rather than evidence that the package is unsafe.