keboola/php-encryption

Registry deprecationdanger

The registry marks the entire package as abandoned and names defuse/php-encryption as its replacement. This is a severe adoption risk for a new dependency.

Release historydanger

The package has had no releases in about eight years, with zero releases in the last 12 months. That strongly indicates the published dependency is no longer maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This supports the conclusion that there is no current maintenance activity for the dependency.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, adding a smaller concern to the broader maintenance risk.

Version stabilitycaution

The signal reports latest version 0.2.3 while the assessed release is 2.0.0, creating a material version-history inconsistency alongside the package's inactive release profile.