paragonie/sodium_compat

Repo bus factorcaution

All two recent commits came from one contributor, creating concentration risk; organization ownership provides some handoff capacity but no second recently active contributor is shown.

Repo commit activitycaution

Only two commits were made in the last 3 months, so recent source activity is modest despite the recent release history.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent for a cryptography-related library.

Workflow auditcaution

All four workflows were analyzed without findings or untrusted-code sinks, but all 12 action references are unpinned, leaving build actions exposed to reference changes.