m-derakhshi/bitcoin-php

Maintainerscaution

Only one registry account has publishing access. Because the repository is user-owned rather than organization-owned, this indicates a thin publishing base, though access records do not prove who actively maintains the code.

Release historycaution

The package has had no releases in the last 12 months, despite nine releases overall and a latest release about 13 months ago. This indicates meaningful maintenance slowdown, although the stable 1.0.8 release provides some maturity evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the broader evidence that maintenance has stalled. The repository is not archived, which limits the severity.

Repo toolingcaution

The project uses Composer and Make, showing build structure, but no security-scanning tools were detected. For a cryptography-focused package, that is a modest hygiene concern.

Security policycaution

The repository has no security policy, which is a transparency gap for a library handling cryptographic keys, signatures, and transactions. No provided signal compensates for that missing disclosure process.