The package includes tests, a README, and an Apache-2.0 declaration, while its repository is not archived and the package name matches the source project. Maintenance has gone quiet: no registry releases appeared in the last 12 months and no maintainers committed during the last 3 months.
58%
Total Score
50
50
83
88
The package declares 10 runtime requirements, including several crypto and blockchain libraries. This is a meaningful dependency surface to maintain, but the signal alone does not show that it is unsafe or unmanaged.
The repository is owned by an individual account rather than an organization, so the small maintainer and contributor footprint is not offset by visible organizational backing.
The latest release was in January 2024, with no releases in the last 12 months despite 25 releases overall. This long release gap raises abandonment risk.
The repository recorded zero commits and zero active maintainers during the last 3 months. Combined with the stale registry release history, this materially increases abandonment risk.
There is one open issue and no issue or pull-request activity in the last month. This provides no recent evidence of active project support.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
hashwallet/web3 Version dev-main | — | — |
sop/crypto-types Version ^0.3.0 | — | — |
web3p/ethereum-tx Version ^0.4.3 | — | — |
hashwallet/tron-api Version dev-main | — | — |
sop/crypto-encoding Version ^0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.