horde/crypt_blowfish

Repo bus factorcaution

All three recent commits came from one contributor, so maintenance continuity depends heavily on a single active person; organization backing provides some handoff capacity but no second recent contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected in the repository.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for an encryption library.

Workflow auditcaution

All three workflows were analyzed successfully with no high-, medium-, or low-severity findings and no untrusted checkout or script-injection paths. However, seven of nine action references are unpinned, which is a supply-chain hygiene weakness.