hadi/csrf
The package includes a README, tests, and a minimal runtime dependency. Its single release dates from 2018, with no recent commits, security scanning, or security policy, making a security library a risky dependency.
35%
Total Score
0
100
70
50
Health Score Breakdown
This is the package's only release, published over eight years ago, with no releases in the last 12 months. That strongly indicates abandonment risk for a security-related library.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of ongoing maintenance.
Composer is used for the build, but no security scanning tools are present. The absence of automated security checks weakens assurance for a security-focused package.
The repository has no security policy, leaving no documented path for reporting vulnerabilities or communicating security fixes. This is a meaningful transparency gap for CSRF protection software.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Habib Hadi |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.