It includes tests, documentation, release notes, and security scanning, with no install-time scripts. Repository popularity is minimal and no security policy is published.
61%
Total Score
50
88
67
The package is 232 days old with 14 releases, all within the last 12 months, but the median interval is about 36 minutes, indicating a concentrated burst rather than clearly sustained maintenance.
The repository has zero commits and zero active maintainers in the last three months, which is a meaningful warning for a package that has continued publishing releases.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than decisive, but this provides no external adoption signal to offset the maintenance gap.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a package handling wallets and transaction signing.
No GitHub Actions workflows were present, so the audit found no workflow hazards; this also provides no evidence of automated release or test controls.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
kornrunner/keccak Version ^1.1 | — | — |
textalk/websocket Version ^1.5 | — | — |
kornrunner/secp256k1 Version ^0.3.0 | — | — |
simplito/elliptic-php Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.