philetaylor/ciphersweet-encrypt

Package scaffoldingdanger

The package includes a README and a GitHub release, but the README explicitly labels the project “WIP” and says “DO NOT USE.” That direct warning materially undermines confidence in this release.

Release historydanger

Only four releases were published, with the latest in September 2020 and none in the last 12 months. The six-year release gap is strong evidence of abandonment for a package intended as a maintained integration library.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This leaves no recent maintenance evidence for a dependency handling encrypted data.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. That creates uncertainty about whether the linked repository is the actual project source rather than a related or reused repository.

Security policycaution

The repository has no security policy. For a package focused on database encryption, this is a meaningful transparency and maintenance gap, although it does not establish a security defect by itself.