district5/mondoc-encryption

Release historycaution

This is the package's only release, published 490 days ago, with no releases in the last 12 months. That leaves maintenance continuity unproven for a library dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the past three months. For a library released only once, this is meaningful evidence that ongoing maintenance is uncertain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, partly offset by the repository's security policy and tests.

Repository archivedcaution

The linked repository is not archived, although its last push was 490 days ago, consistent with the maintenance concern shown by the activity signals.

Workflow auditcaution

The workflow was fully analyzed and has no reported audit findings or untrusted triggers, but all five action references are unpinned, weakening build reproducibility and supply-chain hygiene.