hxfjsw/merkletreephp

The small user base and absent security policy reduce confidence. It includes tests, a clear MIT license, and no install-time scripts, but pin this exact version because the project is not actively maintained.

Latest v0.0.5

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in about three years, with five releases overall and none in the last 12 months. This materially increases abandonment risk.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, and the repository was last pushed in February 2023. This is strong evidence that maintenance has stalled.

Project backing

The registry namespace and repository owner match, but the owner is an individual user rather than an organization. This provides direct ownership alignment without evidence of broader project backing.

Repo popularity

The repository has only 2 stars, 3 forks, and 1 watcher. Low adoption is supporting caution rather than a verdict by itself.

Repo tooling

Composer build tooling is present, but no security-scanning tool is configured. The missing scanner is a modest hygiene gap for a package handling cryptographic tree functionality.