PHPackages                             icedevml/php-itsdangerous - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. icedevml/php-itsdangerous

AbandonedArchivedLibrary

icedevml/php-itsdangerous
=========================

1.0.0-stable(8y ago)0463MITPHP

Since Jul 14Pushed 8y ago1 watchersCompare

[ Source](https://github.com/icedevml/php-itsdangerous)[ Packagist](https://packagist.org/packages/icedevml/php-itsdangerous)[ RSS](/packages/icedevml-php-itsdangerous/feed)WikiDiscussions master Synced 3d ago

READMEChangelogDependenciesVersions (2)Used By (0)

php-itsdangerous
================

[](#php-itsdangerous)

A very simple library which resembles basic functionality of Python's itsdangerous module. Two functions are provided:

```
// take $data, serialize it with JSON, append a HMAC signature to it and finally base64-encode it
Signing::dump($data, $secret, $hash_func='sha256')

// do the reverse: decode base64, read and validate the signature and unserialize JSON-encoded data
Signing::load($data, $secret, $hash_func='sha256')
```

Works with any data that could be succesfully JSON serialized/unserialized.

A user which has got a token generated with `Signing::dump`:

- **can** figure out the original data which is signed (unless you encrypt it with AES prior to signing or do something similiar)
- **can not** tamper the data, as this will make signature invalid, so `Signing::load` will throw `InvalidSignatureException` upon loading
- **can not** generate another token by himself, assuming that he doesn't know the shared secret value (in this case: `some_random_secret`)

Example:
--------

[](#example)

```
use IceDev\itsdangerous\Signing;

$s = new Signing('some_random_secret');

$s->dump(['foo', 'bar']);
// returns: string(104) "WyJmb28iLCJiYXIiXS41ZTkxYjQ3M2E1MmEwNDg3YWNhZGM4MGExYjQwYjIwNDM4NThjODg2NjI3ZDNiODM5OTIzN2E4ZTM1ZGM2ZmIy"

$s->load('WyJmb28iLCJiYXIiXS41ZTkxYjQ3M2E1MmEwNDg3YWNhZGM4MGExYjQwYjIwNDM4NThjODg2NjI3ZDNiODM5OTIzN2E4ZTM1ZGM2ZmIy');
// returns: array(2) { [0]=> string(3) "foo", [1]=> string(3) "bar" }
```

###  Health Score

29

—

LowBetter than 59% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity12

Limited adoption so far

Community9

Small or concentrated contributor base

Maturity63

Established project with proven stability

 Bus Factor1

Top contributor holds 66.7% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Unknown

Total

1

Last Release

3227d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/d57aac04f253da672a65d69257cf7bde970ce5ca864807babe015ac22e9629d9?d=identicon)[icedevml](/maintainers/icedevml)

---

Top Contributors

[![mleszczynski333](https://avatars.githubusercontent.com/u/9352292?v=4)](https://github.com/mleszczynski333 "mleszczynski333 (6 commits)")[![icedevml](https://avatars.githubusercontent.com/u/6976513?v=4)](https://github.com/icedevml "icedevml (3 commits)")

### Embed Badge

![Health badge](/badges/icedevml-php-itsdangerous/health.svg)

```
[![Health](https://phpackages.com/badges/icedevml-php-itsdangerous/health.svg)](https://phpackages.com/packages/icedevml-php-itsdangerous)
```

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)