tyhpdef/php-ext-sodium

Package scaffoldingcaution

Tests are included in both the package and repository, which supports basic reliability. The missing README reduces consumer guidance for this library-like package, while the absent changelog is normal for a first release.

Release historycaution

This is the package's first release, published 0 days ago, with only one release and no demonstrated release cadence. That leaves maintenance maturity unproven.

Repo commit activitycaution

The repository has 0 commits and 0 active maintainers in the last 3 months. Because the package is only 0 days old, this is limited evidence rather than proof of abandonment, but it provides no maintenance track record.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a new package this is a modest transparency and maintenance gap, not a severe risk by itself.

Security policycaution

The repository has no security policy. This is a minor transparency gap for a small, newly published package rather than evidence of unsafe code.