woodw/sha256withrsa

Release historydanger

The latest release was published in December 2020, with no releases in the last 12 months. This is strong evidence of a largely inactive package.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with maintenance having stopped for over three years.

Licensecaution

The artifact contains a license file and the repository also has one, but the manifest declares MIT while the detected file license is Apache-2.0. That mismatch requires clarification before adoption.

Maintainerscaution

Only one registry maintainer is listed. This is a thin ownership base and increases continuity risk, especially alongside the inactive repository.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest repository hygiene gap rather than evidence that the package is unsafe.