It includes tests, an Apache-2.0 license, and an organization-owned repository matching the package. No security policy or scanning is visible, so adoption should wait for a maintenance track record.
58%
Total Score
75
80
75
This is the first release, published 0 days ago, so there is no release track record to demonstrate sustained maintenance.
The repository has 0 commits and 0 active maintainers in the last 3 months; because the package is newly published, this is mainly an unproven-maintenance concern rather than evidence of abandonment.
Composer is used for the build, but no security-scanning tool is present, leaving an avoidable supply-chain hygiene gap.
The linked repository has no security policy, leaving vulnerability reporting and response practices undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpseclib/phpseclib Version ^4.0 | — | — |
tyhpdef/paragonie-constant_time_encoding Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.