iltumio/siwe-php

Licensecaution

The artifact and repository contain explicit license files, but they identify both Apache-2.0 and MIT while the manifest declares only MIT, creating some licensing ambiguity.

Release historycaution

Only two releases were published, both on the same day, with no releases in the last two and a half years. This is a substantial maintenance concern for a security-sensitive library.

Repo commit activitycaution

There were no commits or active maintainers in the last three months. Together with the absence of recent releases, this indicates currently inactive maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. That is a hygiene gap for a library handling Ethereum message verification.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented for a security-related package.