togos/tree-hasher

The compact library includes tests and a straightforward Composer/Make build. However, its documentation, licensing, and maintenance trail are too thin for a dependable dependency, and the source-package relationship is unclear.

Latest 1.0.3

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than 7 years, with only four releases overall and none in the last 12 months. This is strong evidence of abandonment risk, despite the package not being formally deprecated.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the last release being more than 7 years ago, this indicates a substantial abandonment risk.

License

No declared license, license file, or repository license file was found. That leaves the legal terms for using this dependency unclear.

Package scaffolding

The package includes tests, which is a positive sign, but it has no README or changelog. The missing README reduces consumer guidance for a library, while the missing changelog is not a packaging concern on its own.

Repo package mention

The linked repository name does not match the package name, and no README mention could be confirmed. The repository may still be related, but the package-to-source relationship is not clearly established.