byjg/crypto

Release historycaution

The package has existed for about 10 years with six releases and one release in the last 12 months, showing continued but infrequent maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful maintenance concern despite the recent push and release.

Repo popularitycaution

The repository has one star and no forks, so there is little external adoption evidence to offset the thin recent activity; this is supporting caution rather than a verdict on its own.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout, injection, or audit findings, and its jobs scope permissions. However, all four action references are unpinned, creating avoidable update and supply-chain uncertainty.