rock/cert

Release historydanger

The package has had only one release, published nearly 12 years ago, with no releases in the past 12 months. This is strong evidence of abandonment risk, though the stable 1.0.0 version may reflect a small, finished utility.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with its last push in December 2014. No provided maintenance signal compensates for this prolonged inactivity.

Package scaffoldingcaution

The artifact has no README, while the repository also has no tests or changelog. Missing tests and changelog are normal for published artifacts, but the absent consumer documentation is a real transparency gap for a library.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. The absence of scanning lowers supply-chain hygiene, without proving that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This matters more for a package that parses digital certificates, although the small codebase limits the size of the gap.