tasofen/secure-transfer
The package has a clear MIT license and no install-time scripts. Its small repository footprint and lack of security scanning leave little evidence that this cryptography-focused library is maintained safely.
38%
Total Score
67
75
Health Score Breakdown
This is the only release, published over five years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a library intended to handle secure transfers.
Composer build tooling is present, but no security scanning tools are configured. This is a meaningful hygiene gap for security-sensitive code, though it is not evidence of malicious behavior.
The repository is not archived, which avoids the strongest abandonment signal, but it was last pushed in June 2021 and shows no later maintenance evidence in the collected data.
The linked repository has no security policy. For a package implementing encryption and signing, this leaves vulnerability reporting and response practices undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Aleksandr |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.