Hashing unit - native digests, HMAC and timing-safe comparison, on the patterns/unit contract.
68%
Total Score
caution
Only two days old, with one active contributor and no security policy yet.
The package is only 2 days old and has just 2 releases, so there is not enough history to demonstrate sustained maintenance or release reliability.
One contributor made 100% of the single recent commit. Organization ownership provides some handoff capacity, but no second active contributor is yet evidenced.
Only 1 commit was recorded in the last 3 months, so there is little observed activity beyond the initial release period.
Composer build tooling is present, but no security scanning tools were detected. This is a minor transparency and maintenance gap, not a severe risk by itself.
The repository has no security policy. For a hashing package, this leaves vulnerability-reporting expectations unclear, though it does not by itself show unsafe code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
patterns/unit Version ^1.0.1 | — | — |
patterns/value-object Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.