The source repository includes tests, release notes, a clear license, and an organization-backed project. Keep expectations modest because this is a young, lightly adopted library with workflow pinning and security-documentation gaps.
66%
Total Score
75
100
88
75
This is the sole release, published about five and a half months ago, so there is limited evidence of sustained release maintenance.
The repository recorded zero commits and zero active maintainers over the last three months, which materially weakens confidence in ongoing maintenance despite the recent push timestamp.
There is recent issue and pull-request activity, but neither the new issue nor the new pull request was closed or merged in the last month, giving only limited evidence of responsiveness.
Composer build tooling is present, but no security-scanning tooling was detected; for a cryptographic library, that is a modest transparency and maintenance gap.
The repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented for a security-sensitive library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.