PHP Elliptic Curve Cryptography library
20%
Total Score
50
58
50
Packagist marks the entire package as abandoned and names paragonie/ecc as its replacement. Package-level abandonment is a severe adoption risk.
The package has 16 releases over more than 12 years, but none in the last 12 months and its latest release was in January 2021. This indicates a long-standing release freeze.
The repository had zero commits and zero active maintainers in the last three months. That weakens confidence that defects or compatibility issues will be addressed.
The repository uses Composer and Make, providing basic build tooling, but it has no detected security-scanning tools. This is a secondary hygiene gap rather than the main adoption concern.
No security policy was found in the repository. For a cryptography library, this reduces transparency around vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fgrosse/phpasn1 Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.