This is a newly published, stable v1.0.0 package with a clear MIT license, no deprecation status, no install-time lifecycle scripts, and a small, understandable runtime dependency profile. However, it has only one release, no README, tests, or changelog in either the artifact or repository, no observed commit activity beyond the initial publication, no security policy or security scanning, and no demonstrated adoption. These gaps do not establish that the package is unsafe, but they leave maintenance, documentation, and long-term support largely unproven, so adoption should be cautious until more project history develops.
62%
Total Score
67
100
78
80
The artifact and repository each contain only three files, including composer.json and src/NtHash.php. This is consistent with a minimal library but provides little surrounding evidence of documentation, testing, or release engineering.
The artifact and repository contain no README, tests, or changelog. For a small package this may be partly understandable, but the absence of all three leaves usage guidance, validation evidence, and release transparency unproven.
The source repository is owned by an individual user rather than an organization, and no broader project backing is shown. This does not make the package unhealthy, but it provides limited evidence of maintainer capacity beyond one person.
The package is one day old in the collected data and has only one release, so there is no meaningful history demonstrating sustained maintenance or release reliability.
There were zero commits and zero active maintainers in the preceding three months, although the repository was pushed recently and the package is newly released. Sustained maintenance capacity is therefore not yet demonstrated.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.