The package has a complete README, tests, matching repository, and MIT licensing. Its only release was more than four years ago, with no recent commits and no security policy, which is a serious concern for transaction-signing software.
43%
Total Score
0
79
83
There has been only one release, published more than four years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a security-sensitive library.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package having been inactive since its initial release.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but this provides no supporting evidence of broad review or community maintenance.
The repository has no security policy. For software that signs Ethereum transactions, this reduces transparency around reporting and handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
web3p/rlp Version ^0.2.1 | — | — |
kornrunner/keccak Version ^1.0 | — | — |
kornrunner/secp256k1 Version ~0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.