melisplatform/laminas-crypt

Package scaffoldingdanger

The package includes a README and the source repository has tests, but the README explicitly states that the package is abandoned and will receive no further development. That is a direct maintenance warning for a cryptography library.

Repo bus factorcaution

All recent commits came from a single contributor, leaving maintenance highly concentrated. Organization backing provides some ability to hand off work, but no second active contributor is shown.

Repo commit activitycaution

The repository had one commit from one active maintainer in the last three months. This shows some recent activity, but the volume is too low to demonstrate strong ongoing maintenance.

Security policycaution

No repository security policy was found. For a package providing cryptographic and password-hashing functionality, this reduces transparency around vulnerability reporting and response.

Token permissionscaution

All four workflows lack top-level token permission declarations, which is weaker workflow hygiene. However, none declares top-level write permissions, so this is a limited concern rather than a severe risk.