waljqiang/msgcrypt

The dependency footprint is minimal and the repository matches the package name. Its lack of security policy and scanning leaves limited evidence of ongoing safeguards, while the compact source tree offers little consumer documentation.

Latest 1.4

Packagist

40%

Total Score

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly seven years: its latest release was published on October 24, 2019, with zero releases in the last 12 months. This is strong evidence of abandonment risk.

Package scaffolding

The published artifact has no README, which reduces guidance for consumers of this library. Missing tests and a changelog are expected packaging gaps and do not lower the score here.

Repo tooling

Composer is used for the build, and the package has only one runtime dependency, which limits complexity. However, no security scanning tooling is reported, providing little compensating evidence for ongoing security maintenance.

Repository archived

The repository is not archived, but it was last pushed on October 24, 2019, so its active maintenance appears to have stopped nearly seven years ago.

Security policy

The repository has no security policy, leaving no documented channel or process for handling security reports. This is a transparency gap for a cryptographic library.