delboy1978uk/bone-paseto

Maintainerscaution

Only one registry account has publish access, creating a limited publishing and maintenance bus factor. The linked repository is also owned by a user rather than an organization, so no organizational backing compensates for that limitation.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although a recent release provides some compensating evidence, the lack of current source activity is a real maintenance concern.

Repo popularitycaution

The repository has no stars or forks and only one watcher. This provides little external validation, but popularity is supporting evidence and does not by itself indicate the package is unsafe to adopt.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. For a package handling security tokens, the absent automated security tooling is a meaningful hygiene gap.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency for a package that provides security-token functionality.