popphp/pop-crypt

Repo bus factorcaution

One contributor made 100% of the 10 recent commits. Organization backing provides some handoff capacity, but no second recently active contributor is shown, leaving a meaningful continuity risk.

Repo commit activitycaution

The repository recorded 10 commits in the last 3 months, showing recent work. However, all activity came from one active maintainer, so continuity depends heavily on that person.

Security policycaution

The repository has no security policy. For a cryptography component, this weakens vulnerability-reporting transparency even though other maintenance signals are positive.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted triggers, injection findings, or high-severity issues. However, all 3 action references are unpinned, which leaves build inputs less reproducible and warrants a hygiene caution.