narf/hash_hkdf_compat

Release historycaution

The package has had only two releases, with no releases in more than nine years; this is consistent with a small compatibility package but leaves maintenance uncertain.

Repo commit activitycaution

There were no commits and no active maintainers in the past three months, while the last repository push was in 2017; this is the main abandonment concern.

Repo toolingcaution

The repository uses Composer, which fits the package, but no security-scanning tools were detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a small compatibility library this is a minor gap, but it provides no documented route for reporting vulnerabilities.