The package includes tests, a focused dependency set, and organization backing. It has no security policy or automated security scanning, so ongoing oversight is limited.
52%
Total Score
50
100
78
83
There were no commits and no active maintainers in the last three months, consistent with the broader multi-year release gap and indicating no current maintenance activity.
The artifact includes tests, which supports basic project maturity, but it has no README for consumers of this library; the missing documentation is a modest transparency and usability gap.
The package has 14 releases since January 2017, but none in the last four years; the long release gap is a meaningful maintenance concern, though the release history shows it was previously established.
The repository has one star and one fork, showing limited adoption evidence; this is supporting context only and does not independently establish that the package is unsafe to depend on.
Composer build tooling is present, but no security scanning tools were detected; for a cryptography library, that is a relevant hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.