Native PHP extension for post-quantum key encapsulation (ML-KEM) and signatures (ML-DSA, SLH-DSA), with liboqs built in
58%
Total Score
caution
Usable with caveats: this is a brand-new package maintained by one contributor.
The repository is owned by an individual rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.
This package was released only once and is 0 days old, so there is no demonstrated release track record or maintenance cadence yet.
One contributor made all recorded commits, leaving maintenance dependent on a single person with no demonstrated handoff capacity.
Only one commit was recorded in the last 3 months, which is consistent with a newly published package but provides little evidence of sustained maintenance.
The repository has no security policy. This is a meaningful transparency gap for a cryptography-focused extension, although the README does disclose that the project is experimental and unaudited.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.