kornrunner/keccak

The package is focused and easy to inspect, with a README, tests, MIT licensing, and no install-time scripts. Its last registry release was in 2020, recent commit activity is absent, and all eight workflow actions are unpinned; pin this version and monitor updates.

Latest 1.1.0

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has five releases but none in the last 12 months; its latest registry release was on December 7, 2020. This is a substantial maintenance and freshness concern for a dependency.

Repo commit activity

No commits or active maintainers were recorded in the last three months. The recent repository push is a compensating positive, but the absent recent commit activity still limits confidence in ongoing maintenance.

Repo issue activity

There are no open issues and only one open pull request, with no recent issue or pull-request activity. This is consistent with a quiet project but does not demonstrate active maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest repository hygiene gap rather than evidence that the release is unsafe.

Security policy

The repository has no security policy, leaving vulnerability reporting expectations undocumented. This lowers transparency but is not severe on its own.