mstefan/php-ecrecover

The README gives concrete signing and verification examples, and the repository clearly matches the package. Its explicit dependencies are modest, but the single release and no recent commits leave little evidence of ongoing maintenance.

Latest 0.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 4 years and 11 months ago, with no releases in the last 12 months. That is strong evidence of an inactive project.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring about 4 years and 11 months ago. This materially increases abandonment risk.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption provides no compensating confidence for the lack of maintenance.

Repo tooling

Composer is used as the build tool, but no security-scanning tool is present. This is a hygiene gap rather than a standalone severe risk, especially for this very small package.

Security policy

The linked repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.