Signature generation and validation for REST API query authentication
38%
Total Score
unhealthy
Risky to adopt: no releases in over nine years and no repository commits in the last three months.
The package has had no release in over nine years and none in the last 12 months, which is strong evidence of abandonment despite its 13-release history.
There were zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern shown by the stale release history.
The release declares MIT and includes license files, so it is licensed; however, detected Apache-2.0 text is not covered by the declaration and creates a transparency concern.
There are three open pull requests but no new or merged pull requests in the last month, suggesting unresolved maintenance activity rather than an actively maintained project.
Composer and Phing provide build tooling, but no security scanning tools are configured, leaving a hygiene gap for a library that handles request authentication.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ircmaxell/random-lib Version v1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.