mervick/aes-everywhere

The package has tests, a clear README, an MIT license, and no runtime dependencies. Recent repository activity is limited, and its workflows use unpinned actions without a security policy or scanning.

Latest v1.1.3

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with the latest in October 2019 and none in the last 12 months. The linked repository was pushed more recently, but the registry release itself is substantially stale.

Repo commit activity

No commits or active maintainers were recorded in the last three months. The recent repository push offsets this somewhat, but it does not demonstrate ongoing development.

Repo tooling

The repository reports no build tooling and no security scanning tooling. This is a modest transparency and maintenance concern, though the package has tests and a simple structure.

Security policy

The repository has no security policy. For a cryptography-focused library, this leaves vulnerability reporting and response expectations less clear.

Workflow audit

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and neither grants top-level write access. However, all 7 action references are unpinned, which weakens build reproducibility and update integrity.