secretary/core

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing development, although the repository was pushed recently for this release.

Repo popularitycaution

The repository has only 2 stars, 1 fork, and 1 watcher, indicating a very small user and contributor audience; this is a modest resilience concern but not proof of abandonment.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear and reducing transparency for a package that handles secrets.