paragonie/argon2-refiner

Clear documentation, tests, and release notes make the small command-line tool easy to inspect. Organization backing and a minimal runtime dependency reduce complexity, but do not provide evidence of current support.

Latest v0.3.0

Packagist

46%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in April 2021, with no releases in the last 12 months. Six releases show some history, but the long period without a release materially raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no visible maintenance since April 2021.

Lifecycle scripts

A post-autoload-dump install-time script is present. The signal does not show that it is harmful, but any install-time execution adds a small amount of package behavior to review.

Security policy

No repository security policy was found. This is a transparency gap, though it is less significant for a small benchmarking command-line tool than for a security-sensitive runtime library.

Workflow audit

The single workflow was fully analyzed and has no untrusted checkout, script-injection, or high-severity findings. However, all six action references are unpinned, leaving avoidable workflow supply-chain exposure.