The package has clear documentation, a stable release line, and a focused dependency set. Its single publisher, absent security policy, and unpinned workflow actions reduce confidence in long-term maintenance and build hygiene.
68%
Total Score
67
100
88
67
One registry publisher creates a thin publishing base. The repository is user-owned rather than organization-backed, so there is no provided organizational context to offset that concentration.
There were no commits and no active maintainers in the last three months, a meaningful sign of currently limited development activity despite the recent release history.
One star and no forks indicate very limited visible adoption. Popularity is supporting evidence rather than a verdict, but it provides little extra confidence here.
The repository uses Make and Composer, but no security scanning tools were detected, leaving a security-process gap for an encryption library.
No repository security policy was found, reducing transparency about vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.