php-standard-library/crypto

Name lookalikedanger

The artifact overlap is 0.973 with php-standard-library/php-standard-library, which has 73 stable releases and about 376,811 monthly downloads versus 10 releases and 741 downloads here. With no self-described fork or lookalike disclosure, consumers most likely wanted the established package.

Release historycaution

The package is only 191 days old with 10 releases, and its median release interval is about 4 hours, indicating a very new project with a bursty release history rather than established maturity. The latest release is recent, which partly offsets abandonment concerns.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, weakening evidence of ongoing development despite a recent push and active registry releases.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a meaningful assurance gap for a cryptography library, although the repository does contain tests.

Security policycaution

No security policy was found in the repository. For a package exposing encryption, signing, key exchange, and key-derivation APIs, this reduces transparency around vulnerability reporting and response.