menatwork/diffiehellman

Usable with caveats: it is a stable, licensed package with matching organizational repository backing and no deprecation, but release activity is nearly two years old and there have been no commits in the last three months. The small repository also lacks tests and a security policy.

Latest 1.0.4

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has six releases since 2013, but none in the last 12 months and the median release interval is about 770 days. This indicates slow maintenance and lowers confidence for a cryptographic dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although it is less severe because the repository is not archived and has recent push activity overall.

Repo popularity

The repository has only 2 stars and 1 fork, indicating limited adoption and external review. Popularity is supporting evidence rather than a decisive health verdict, so this is a modest concern.

Repo tooling

The repository uses Composer, but no security-scanning tools were detected. For a cryptographic library, the missing automated security review is a transparency and maintenance gap.

Security policy

No security policy was found in the repository. That makes vulnerability reporting and project response expectations less clear for a security-sensitive package.