defuse/php-encryption

Maintainerscaution

Two named registry maintainers align with the documented joint project ownership. That is a credible small maintainer base, though it provides limited redundancy if either maintainer becomes inactive.

Project backingcaution

The registry namespace and repository owner match, and the repository is owned by a user rather than an organization. This is consistent ownership evidence, though it offers less institutional backing than an organization-owned project.

Release historycaution

The package has a long history and 11 releases, but its latest release was over three years ago and it had no releases in the last 12 months. That materially raises the risk that compatibility and maintenance have stalled.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the project has historical evidence of maturity, this recent inactivity is a meaningful abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with one open pull request. This is consistent with a quiet project and provides little evidence of active issue handling.