The small scope, clear README, tests in the repository, and minimal dependency footprint reduce integration risk. Its age makes it a poor default for new security-sensitive code; pin this version only when its PHP compatibility is required.
57%
Total Score
67
100
81
83
Only three releases have been published, with no release in over seven years and no releases in the last 12 months, indicating substantial release stagnation.
There were no commits and no active maintainers in the last three months, reinforcing the evidence of low current maintenance activity.
There are no open issues and one open pull request, but no issues or pull requests were newly closed or merged in the last month, suggesting limited recent project movement.
Composer build tooling is present, but no security-scanning tooling was detected; this is a modest transparency gap for a cryptographic library.
The repository is not archived, but its last push was in September 2022, so the unarchived status does not offset the lack of recent registry releases.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.