keboola/key-generator

Release historycaution

This is the sole release, published 511 days ago, with no releases in the last 12 months. That limits evidence of ongoing release maintenance, although recent repository activity partly offsets the concern.

Repo bus factorcaution

One contributor made all three recent commits, leaving no demonstrated handoff capacity in the recent history. Organization ownership provides some maintenance backing but does not remove the concentration concern.

Repo commit activitycaution

Three commits occurred in the last three months, showing current activity, but the activity is modest relative to the package's long release gap.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a small library this is a hygiene limitation rather than a severe dependency risk.

Security policycaution

The repository has no security policy. That reduces disclosure transparency, though the package's small scope and clear source structure limit the impact.