paragonie/anti-csrf
It includes tests, release notes, a license, and security scanning, with a small runtime dependency set. Unpinned workflow actions and no security policy leave preventable maintenance and supply-chain gaps.
58%
Total Score
67
100
94
75
Health Score Breakdown
The package has 13 releases since 2015, but none in the last two years since the May 2024 release. That long release gap lowers confidence in ongoing maintenance.
The repository recorded no commits and no active maintainers in the last three months. Combined with the old latest release, this is a meaningful maintenance concern.
There were no new or closed issues or pull requests in the last month, alongside three open pull requests. This is consistent with limited current activity but is not by itself evidence of abandonment.
The repository has no published security policy, leaving vulnerability-reporting expectations and response procedures unclear for a security-focused library.
The single workflow was fully analyzed with no detected injection sinks or high-severity findings, but all 6 action references are unpinned. That leaves avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Scott Arciszewski |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 paragonie/constant_time_encoding Version ^2|^3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.