divineomega/php-password-cracker

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no distinct replacement identified. This is a serious adoption warning even though the assessed release is recent.

Repo bus factorcaution

One contributor made all commits in the last three months, leaving no demonstrated handoff capacity for this user-owned project.

Repo commit activitycaution

Only one commit was made in the last three months by one active maintainer. Recent activity exists, but the very low cadence provides limited evidence of sustained maintenance.

Security policycaution

The repository has no security policy. For a password-auditing package, this weakens vulnerability-reporting transparency.

Workflow auditcaution

The workflow audit was complete, uses read-only permissions, and found no high-confidence dangerous findings. However, both action references are unpinned, leaving a build reproducibility and action-tampering hygiene gap.