infocyph/epicrypt
Modern cryptography, token, password and data-protection toolkit for PHP.
78%
Total Score
healthy
Active releases and a maintained repository are offset by single-contributor development and wholly unpinned workflow actions.
Health Score Breakdown
One contributor made all 366 commits in the last 3 months. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving a real continuity concern.
All 28 analyzed action references are unpinned, weakening build reproducibility and action supply-chain hygiene. The cache-poisoning findings are low confidence and therefore do not independently lower the score; workflows were fully analyzed with no untrusted checkout or script-injection sinks.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Infocyph |
| abmmhasan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/clock Version ^1.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/simple-cache Version ^3.0 | — | — |
phpseclib/phpseclib Version ^4.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.