The package includes tests, a README, a license, and no install-time scripts. Its source and registry have seen no release or commit activity since January 2017, and the project has no security policy, so maintenance risk remains significant.
56%
Total Score
50
100
80
75
The package has only two releases, both in January 2017, with no releases in the last 12 months; this is strong evidence of a mature but likely inactive dependency.
There are no open issues or pull requests and no activity in the last month; while this may reflect a small stable project, it provides no evidence of current maintenance.
The repository is not archived, which avoids an explicit abandonment marker, but its last push was in January 2017 and does not offset the stale release history.
The repository has no security policy, reducing transparency for a password-hashing library; the package's tests and established source repository provide only partial compensation.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.