sop/pkcs5

Clear licensing and repository tests improve transparency and confidence in the published artifact. However, the package has had no release or commit activity since May 2019, making ongoing compatibility and maintenance a serious concern.

Latest 0.3.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in May 2019, with no releases in the last 12 months and only five releases overall. This long period without updates is a substantial abandonment and compatibility concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged release inactivity. No newer activity is provided to offset this concern.

Dependency profile

The package has five runtime dependencies, including three related project libraries, creating some dependency-chain maintenance exposure. The profile is still reasonably focused for a small PHP cryptography library.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This matters more for a cryptography-related library and is not compensated by another provided security signal.

Version stability

Version 0.3.0 is not a stable major release, which adds some maturity risk for a library, although it is not marked as a prerelease and has a clean recent prerelease share.