phauthentic/password-hashers

Release historycaution

The package has four releases since October 2018, with no registry release in the last 12 months and the latest published in March 2024. Recent repository activity partly offsets the long release gap, but release maintenance is still slow.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed recently, the short-term activity is too quiet to support a fully healthy maintenance rating.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a password-hashing library, that missing security automation is a meaningful hygiene gap.

Security policycaution

The repository has no security policy. For a library handling password hashing, this weakens the project's documented path for reporting and coordinating security issues.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or broad top-level write permissions. However, all five action references are unpinned, leaving the build exposed to upstream action changes.