keboola/azure-key-vault-client

Release historycaution

The package has been maintained since 2020 with 15 releases, but only one release arrived in the last 12 months; the recent 4.3.0 release is a positive counterpoint.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, reducing clarity about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths. Its one action is unpinned, a minor reproducibility concern, while the absence of a top-level permissions block is acceptable on its own.