The MIT license, matching repository, and usable README make the package transparent to inspect. Its large runtime dependency set and absent security policy add maintenance burden, while the project has not shown recent activity.
45%
Total Score
0
50
71
75
This is the only release, published nearly three years ago, with no releases in the last 12 months. That is strong evidence of a stagnant package rather than an actively maintained dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
The package declares 15 runtime dependencies, including several cryptography and blockchain components, creating a relatively broad maintenance and update surface for an inactive project.
The repository has 1 star and no forks or watchers. Popularity is not required for health, but these very low adoption signals provide little supporting evidence of community scrutiny.
The repository is not archived, which preserves a path for future maintenance, but its last push was nearly three years ago and does not offset the inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sop/asn1 Version ^3.3 | — | — |
ionux/phactor Version 1.0.8 | — | — |
sop/crypto-types Version ^0.2.1 | — | — |
guzzlehttp/guzzle Version ^7.5 | — | — |
kornrunner/keccak Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.