Its six-file implementation keeps the dependency surface simple. The MIT declaration and matching repository help, but the project has one registry maintainer and no security policy or scanning.
55%
Total Score
50
100
81
75
Only two releases were published, both around May 2025, and there have been no releases in the past year. This is a meaningful maintenance concern for a package that may need compatibility updates.
The repository recorded zero commits and zero active maintainers in the last three months, although it was pushed on January 2, 2026. That suggests limited current development rather than clear abandonment.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these figures provide little external evidence of adoption or review.
Composer is used as the build tool, which fits this package, but no security scanning tools were detected. The missing automated security coverage modestly reduces transparency.
The linked repository has no security policy. For a small Laravel hashing package this is a transparency gap, though it is not evidence of an unsafe release by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.