Read and verify Aadhaar Offline e-KYC (share-code ZIP / signed XML) and Secure QR codes in any PHP app: UIDAI signature checks against pinned certificates, mobile/email hash matching, freshness rules and privacy-safe defaults. No framework required.
62%
Total Score
caution
A brand-new 0.x package has no recorded commit activity yet, despite strong documentation and repository hygiene.
The package was first released today and has only two releases, both within hours, so there is not yet enough history to demonstrate sustained maintenance.
The repository records zero commits and zero active maintainers in the last three months. Because the project was released today, this is mainly a lack of evidence rather than proof of abandonment, but it limits confidence.
The repository has zero stars, forks, and watchers. Its same-day creation explains much of this, so it is weak supporting evidence rather than a severe concern.
Version v0.1.1 is a non-stable 0.x release, indicating that breaking changes remain possible even though it is not marked as a prerelease.
All seven workflows were analyzed with no auditor findings, no untrusted checkouts, and no script injection. However, all 19 action references are unpinned, leaving a supply-chain hygiene gap despite scoped permissions in several workflows.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
robrichards/xmlseclibs Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.