ironchoi/eip712-hash-sign

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last 3 months. Combined with the one-release history, this is the strongest abandonment concern in the assessment.

Dependency profilecaution

Five runtime dependencies, including Laravel components and other related PHP libraries, create a meaningful dependency surface. The profile is not unusually large for this library, so it is a moderate rather than severe concern.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds installation complexity and requires extra trust in package behavior, though it is not by itself evidence of an unsafe release.

Project backingcaution

The registry namespace and repository owner match an individual account, so the single registry maintainer is consistent with the project's ownership context. This indicates limited apparent organizational backing but is not a problem by itself.

Release historycaution

This is the sole release, published 2 years and 5 months ago, with no releases in the last 12 months. That limited history and age reduce confidence in ongoing maintenance.