The package includes tests, a security policy, a matching repository, and a documented MIT license. All 28 analyzed workflow actions are unpinned, adding avoidable build-integrity exposure.
42%
Total Score
50
81
83
This is the only release, published nearly four years ago, with no releases in the last year. That strongly raises abandonment risk for a cryptographic library.
The repository recorded no commits and no active maintainers in the last three months, while its last push was nearly four years ago. This is strong evidence of abandonment.
Version v0.1.0 is an early, non-stable-major release, so compatibility and production maturity are less established.
All four workflows were analyzed successfully and no audit findings or untrusted checkouts were reported. However, all 28 action references are unpinned, leaving workflow dependencies exposed to upstream changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brick/math Version ^0.9|^0.10 | — | — |
symfony/config Version ^5.4|^6.0 | — | — |
fgrosse/phpasn1 Version ^2.0 | — | — |
psr/http-client Version ^1.0 | — | — |
symfony/console Version ^5.4|^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.