virgil/purekit

Virgil Security introduces an implementation of the Password-Hardened Encryption (PHE) protocol that provides developers with a technology to protect users passwords from offline/online attacks and make stolen passwords useless even if your database has been compromised.

Latest v4.0.0

Packagist

68%

Total Score

caution

Usable with caveats: no release in nearly two years and no recent commits.

Health Score Breakdown

Lifecycle scripts

The package runs a post-install-cmd lifecycle script. Install-time execution adds supply-chain exposure, although this signal does not show that the script is malicious.

Release history

The package has 13 releases since March 2019, but none in the last 12 months; its latest release was in October 2024. This indicates a mature history but currently weak release activity.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. This is direct evidence of currently inactive development and raises maintenance risk.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with two open issues and two open pull requests. This supports the picture of limited current project activity.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Virgil Security, Inc

Direct Dependencies

Dependency	Last Release	Score
virgil/crypto Version ^7.0.0	—	—
google/protobuf Version ^3.6.1	—	—
myclabs/php-enum Version ^1.8	—	—
vlucas/phpdotenv Version ^5.6	—	—
guzzlehttp/guzzle Version ^7.8	—	—