lcoy/cipher

Release historycaution

The package is young at 43 days but has 13 releases, including releases within the last 12 months, showing active early development rather than abandonment. Its short history still leaves limited evidence of long-term maturity.

Repo bus factorcaution

All 31 recent commits came from one contributor, giving the project a single-person maintenance dependency without evidence of a second active contributor.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling security issues.

Workflow auditcaution

The one workflow was fully analyzed with no injection or high-severity findings, and it scopes permissions at job level. Both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.