langleyfoxall/php-rsa-signer

Release historydanger

This is a mature package with only one release, published in July 2019, and no releases in the last 12 months. The absence of subsequent releases is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the package's long-standing inactivity and increasing abandonment risk.

Package file treecaution

The complete tree contains only five files, including a single source file and no test or CI files. This is a very small project footprint for a security-sensitive library and limits transparency about verification.

Package scaffoldingcaution

The README and release notes improve usability and document the initial release, but the package and repository contain no tests. Testing is important for a cryptographic signing library, so this is a real verification gap.

Repo popularitycaution

The repository has only two stars, no forks, and no watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of broad community support.