tencent/tls-sig-api

Release historydanger

There has been only one release, published in April 2018, with no releases in the last 12 months. This is substantial evidence of a stagnant release process for a signing library.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling was detected. That is a modest transparency and maintenance gap, especially for a library that generates and verifies signatures.

Repository archivedcaution

The linked repository is not archived, which is a meaningful counterweight to the old release history. However, its last push was in April 2019, so it appears inactive despite remaining available.

Security policycaution

The repository has no security policy, leaving the reporting and response process undocumented. This adds a maintenance-transparency concern, though it is less severe than evidence of an archived project.