quantumunit/security

Release historydanger

This is the package's only release, published nearly four years ago, with no releases in the last 12 months. That gives little evidence of ongoing maintenance for a security library.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, reinforcing that development has stopped rather than merely slowed.

Licensecaution

The artifact contains an MIT license file, so the release is licensed, but the manifest declares it as proprietary. That mismatch creates avoidable legal uncertainty.

Package scaffoldingcaution

Tests are present, which is positive, but the README is only 10 characters and offers no consumer guidance. The absent changelog is normal for a published artifact and is not a concern.

Repo toolingcaution

Composer build tooling is present, but the repository reports no security-scanning tools. For a package implementing authentication, authorization, encryption, and JWT handling, that weakens assurance.