paragonie/paseto
The library has tests, a clear license, release notes, and organizational backing. Its repository lacks a security policy and has no declared workflow token permissions, adding governance concerns.
67%
Total Score
75
50
89
80
Health Score Breakdown
Nine runtime dependencies, including required PHP extensions and cryptographic support libraries, create a moderately broad dependency surface but are consistent with a cryptographic PHP library.
The package has 33 releases over roughly 8 years, but none in the last 12 months despite a 19-day median interval historically; this is a meaningful maintenance slowdown.
There were zero commits and zero active maintainers in the last three months, reinforcing the concern that maintenance has slowed.
Only one issue and one pull request are open, with no new or closed items in the last month; this is consistent with a quiet project but does not independently establish abandonment.
The repository uses Composer build tooling, but no security scanning tools were detected; the missing scanning coverage is a governance gap for a security-focused library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Paragon Initiative Enterprises |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 paragonie/corner Version ^2 | — | — |
paragonie/easy-ecc Version ^1.3 | — | — |
symfony/polyfill-php83 Version * | — | — |
paragonie/sodium_compat Version ^1|^2 | — | — |
paragonie/constant_time_encoding Version ^2.7|^3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.