sop/gcm

Its README, repository tests, MIT license, and small dependency footprint make the package understandable and straightforward to install. The long maintenance gap is especially concerning for an encryption library; pinning this release carries meaningful abandonment risk.

Latest 3.0.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about seven years ago, with no releases in the last 12 months. Although the package previously had a regular release cadence, this prolonged gap raises abandonment risk.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with a project that has not received recent maintenance.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and one pull request remains open, indicating little current project activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For an encryption library, that is a meaningful maintenance and transparency gap.

Security policy

The repository has no security policy. This makes vulnerability reporting and coordinated maintenance less clear for a security-sensitive library.