vkoori/pgp
The README documents integration, and the package has a small dependency surface with no install-time scripts. Its stable version, release notes, and matching repository improve transparency, but the project lacks licensing and security-policy documentation.
46%
Total Score
0
100
69
75
Health Score Breakdown
The package has had no release in over three years and none in the last 12 months, despite three releases overall. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.
Neither the package nor the linked repository declares or contains a license, so developers have no clear permission to use, modify, or redistribute the code.
Composer is used as the build tool, but no security-scanning tooling is configured. For this small package that is a modest hygiene gap, not a severe risk by itself.
The linked repository is not archived, although its last push was in May 2023; the absence of an archive flag does not compensate for the lack of recent activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Koorosh SafeAshrafi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vkoori/jwt Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.