indigophp/hash-compat

The package is small, clearly documented, MIT-licensed, and has no install-time scripts or runtime libraries. Its organization-backed repository has tests and release notes, but there is no recent maintenance or security scanning to support continued use.

Latest v1.1.0

Packagist

15%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement provided. Package-level deprecation is a severe adoption risk even though this specific release is stable.

Release history

The package has only three releases, with the latest published in August 2015 and none in the last 12 months. Its long release gap indicates that fixes and compatibility updates are unlikely.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This confirms the lack of current development rather than merely showing a slow release cadence.

Repository archived

The source repository is archived and was last pushed in May 2017, so it is no longer receiving normal maintenance. This strongly increases abandonment and compatibility risk.

Project backing

The repository is owned by the indigophp organization, providing some project backing. That does not compensate for the repository being archived and the package being abandoned.