Package Health/paragonie/pqcrypto_compat

paragonie/pqcrypto_compat

Tests, a readable README, release notes, and a clean workflow make the release comparatively transparent. The organization-backed project is young and has not added a commit in three months, while its cryptography focus makes the absence of security scanning and a security policy more significant.

Latest v0.3.2

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is young at 162 days old, with five releases and a median interval of about 1.5 days. This shows early publishing activity but provides limited evidence of long-term maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. Recent releases partly offset this, but the lack of observed source activity is a meaningful maintenance concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That is a notable hygiene gap for a library implementing cryptographic algorithms.

Security policy

The repository has no security policy. For a cryptography library, this reduces transparency about how vulnerabilities and responsible disclosures are handled.

Version stability

Version v0.3.2 is a stable, non-prerelease release, but the package remains below 1.0, so its API and behavior may still change materially.