starkbank/ecdsa

fast openSSL-compatible implementation of the Elliptic Curve Digital Signature Algorithm (ECDSA)

Latest 2.2.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months. Recent registry and repository release activity partly offsets this quiet period, but it still weakens evidence of ongoing development.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a cryptographic library.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-830390 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. starkbank/ecdsa is vulnerable to Signature Malleability in versions 2.0.0 - 2.1.0.	2.0.0 - 2.1.0	Low