keboola/object-encryptor

Dependency profilecaution

Ten runtime dependencies, including cloud SDKs and encryption libraries, create meaningful dependency surface for this security-sensitive library, but the profile is coherent with its stated cloud integrations.

Repo bus factorcaution

All two recent commits came from one contributor. Organizational ownership reduces the risk somewhat, but no second recent contributor is shown to provide maintenance redundancy.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing recent activity but a relatively light maintenance pace.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected. For an encryption library, that is a meaningful hygiene gap rather than a release blocker.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency for a library handling encryption and cloud key-management integrations.