fuko-php/masked

Release historycaution

The package has existed for nearly 8 years but has only 8 releases, with one release in the last year. The release published today provides current evidence of activity, but the overall cadence remains sparse.

Repo commit activitycaution

No commits or active maintainers were recorded in the past three months. The same-day release provides some counterevidence, but the recent development activity still appears thin.

Security policycaution

The repository has no security policy. For a library intended to handle sensitive data, that is a transparency gap, though it is not severe on its own.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, script injection, or high-confidence audit findings. However, all 3 action references are unpinned, leaving a supply-chain hygiene gap.