It has tests, an MIT license, and no install-time scripts. Its small dependency base and clear package layout help, but do not offset the prolonged inactivity.
44%
Total Score
25
100
71
88
The package has had no release in over 4 years: its latest release was September 2021, with zero releases in the last 12 months. This is strong evidence of abandonment for a maintained library.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the registry's long release gap. The project may still function, but current maintenance capacity is not demonstrated.
One registry publishing account is consistent with a small project, and the repository owner is the same individual. However, the available activity signals show no recent maintenance to compensate for the thin maintainer base.
Composer is used for the build, but no security scanning tool is present. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The repository is not archived, which avoids an explicit abandonment marker, but its last push was in August 2021 and does not offset the absence of recent releases or commits.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wanecho/web3.php Version ^1.0.0 | — | — |
guzzlehttp/guzzle Version ^7.1.0 | — | — |
kornrunner/secp256k1 Version ^0.1.2 | — | — |
simplito/elliptic-php Version ~1.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.