web-auth/cose-lib

Healthy and suitable to depend on. It has a long, active release history, current repository work, strong project hygiene, and clear organizational backing; maintenance is concentrated in one contributor but two others remain active.

Latest 4.8.2

Packagist

88%

Total Score

Maintainer Stability

Maturity

100

Supply Chain

100

Are you affected? Scan for Free

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-246457 New web-auth/cose-lib is vulnerable to Improper Verification of Cryptographic Signature in versions 0.0.1 - 4.7.1.	0.0.1 - 4.7.1	Medium
AIKIDO-2026-767492 New web-auth/cose-lib is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 4.7.1.	0.0.1 - 4.7.1	Medium
AIKIDO-2026-747353 New web-auth/cose-lib is vulnerable to Private Key Recovery in versions 2.1.0 - 4.7.1.	2.1.0 - 4.7.1	Medium

Package versions

Maintainers

Florent Morselli

All contributors

Direct Dependencies

Dependency	Last Release	Score
brick/math Version ^0.9 \|\| ^0.10 \|\| ^0.11 \|\| ^0.12 \|\| ^0.13 \|\| ^0.14 \|\| ^0.15 \|\| ^0.16 \|\| ^0.17 \|\| ^0.18 \|\| ^0.19 \|\| ^0.20 \|\| ^1.0	—	—
spomky-labs/pki-framework Version ^1.0	—	—