pecl/mcrypt

Release historycaution

Only two releases exist, both published about a year ago, with no releases in the last 12 months; this is a meaningful maintenance concern.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months, leaving current maintenance capacity unclear despite the repository remaining open.

Repo toolingcaution

Composer build tooling is used, but no security scanning tools are configured; the missing scanning is a transparency gap rather than a severe risk on its own.

Security policycaution

No repository security policy was found, which weakens vulnerability-reporting transparency for an extension that provides cryptographic bindings.

Token permissionscaution

The only workflow lacks top-level token permissions, so its permissions are not explicitly minimized.