gponster/laravel-pbkdf2

Release historydanger

The package has only one release, published over 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need compatibility or security maintenance.

Package scaffoldingcaution

The artifact includes a README, but it is only 17 characters long and the repository has no tests or changelog. The GitHub release is a small positive, but it does not offset the lack of maintenance evidence.

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not required for health, but these counters provide no supporting evidence of community use or oversight.

Repo toolingcaution

Composer is used for builds, which is appropriate for this package, but no security scanning tools are present. The lack of scanning is a modest hygiene concern rather than proof of a vulnerability.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities. This adds a transparency gap to an already stale project.