driftwood/symmetric-encryption

Licensecaution

The artifact declares EUPL-1.1 and includes a license file, but the detected text identifies EPL-1.0. That mismatch creates a real licensing-transparency concern despite the presence of a license.

Maintainerscaution

Only one registry account has publishing access, and the project backing is an individual user rather than an organization. This leaves limited visible publishing capacity and increases bus-factor concern.

Release historycaution

The package has existed for over 10 years but has only five releases, with no release in the last 12 months and a median release interval of about 416 days. This indicates a slow and currently stale release cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months. That weakens evidence of ongoing maintenance, even though the repository is not archived.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tool was detected. For a cryptography-focused library, that is a meaningful hygiene gap.