larva/think-hashing

Release historydanger

The package has only 3 releases, all clustered in August 2021, and none in the last 12 months; the latest release is about 5 years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months, consistent with roughly 5 years since the last push. This materially increases abandonment risk.

Project backingcaution

The repository is owned by an organization, which provides some backing context, but the observed absence of recent commits shows that organizational ownership has not translated into current maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little visible community validation or outside maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a meaningful maintenance and assurance gap for a hashing library.