eciesjs

Repo bus factorcaution

All 4 recent commits came from one contributor, creating a real continuity risk. Organization backing provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a cryptography library.

Workflow auditcaution

Both workflows were analyzed completely and have no untrusted checkouts or script injection, but all 12 action references are unpinned. The reported cache-poisoning issue has low confidence and is hygiene-level evidence, not a severe finding.