lekoala/silverstripe-encrypt

Project backingcaution

The registry namespace and repository owner match, showing that the linked repository belongs to the package publisher. The owner is an individual account rather than an organization, so long-term bus-factor support is limited.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release and push show some maintenance, the current quiet period raises a modest maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a package handling encrypted data, that is a meaningful transparency and maintenance gap.

Security policycaution

The repository has no security policy. For an encryption-focused package, the lack of a documented vulnerability reporting process weakens security transparency.

Version stabilitycaution

The assessed release is marked stable and is not a prerelease, but the reported latest version is 4.1.5 while the assessed version is 5.0.0, creating a release metadata inconsistency.