php-privacy/openpgp

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful recent maintenance gap despite the package's strong release history.

Repo popularitycaution

The repository has six stars, eight forks, and two watchers, indicating a small user and contributor footprint. Popularity is supporting evidence rather than a verdict, but it limits confidence in broad community backing.

Security policycaution

The repository has no security policy. For a cryptographic library, this is a transparency and vulnerability-reporting gap that is not covered by the other signals.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported dangerous findings, but both of its two action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.