Its Apache-2.0 licensing and matching repository make its provenance clear. The tiny README, absent security policy, and zero project activity leave consumers with little ongoing support.
38%
Total Score
50
64
75
This is the package's only release, published in December 2020, with no releases in the last 12 months; that long absence strongly raises abandonment risk.
The package includes a README and GitHub release notes for this version, providing minimal consumer and release context. The README is only 16 characters and the project has no tests or changelog, limiting transparency.
There are no open issues or pull requests and no activity in the last month; combined with the old last push, this supports a conclusion of inactive maintenance.
The repository has zero stars and forks and only one watcher, offering little supporting evidence of community adoption or review.
Composer is used for builds, which is appropriate for this package, but no security scanning tooling is present; this is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ionux/phactor Version ^1.0 | — | — |
bitwasp/bitcoin Version ^1.0 | — | — |
iexbase/tron-api Version ^3.1 | — | — |
kornrunner/keccak Version ^1.0 | — | — |
web3p/ethereum-util Version ^0.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.