lerislentia/password-hash

Release historydanger

This package has had only one release, with no release in over eight years. That is strong evidence of abandonment risk for a dependency, even though the repository remains available.

Package scaffoldingcaution

The package includes tests and release notes for this version, which provide some confidence, but its README is only 695 characters and remains generic Composer template text rather than package documentation.

Repo package mentioncaution

The repository name matches the package, so it likely belongs to the package, but the README does not mention the package name. This weakens confidence that the source documentation is complete.

Repo popularitycaution

The repository has zero stars and zero forks, with only one watcher. Popularity is not decisive by itself, but this very thin footprint provides no compensating evidence for the long period without releases.

Security policycaution

The repository has no security policy. For a password-hashing library, this is a meaningful transparency gap because users have no documented process for reporting or handling security issues.