hlf_513/dingtalk-crypto

Risky to adopt without strong justification: it has had no release or repository update since January 2018. The small, focused package includes tests, a README, an MIT declaration, and no install scripts, but its maintenance and security transparency are too weak for a dependable long-term dependency.

Latest 1.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published in January 2018, with no releases in the last 12 months; this is strong evidence that maintenance has effectively stopped.

Maintainers

Only one registry publishing account is listed, leaving little visible publishing redundancy; this concern is reinforced by the repository's long inactivity.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured; this is a modest transparency gap, especially for a package handling encryption.

Repository archived

The repository is not formally archived, but its last push was in January 2018, roughly 8 years ago, which indicates prolonged inactivity despite the non-archived status.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities should be reported for a cryptographic package.