spkm/ciphr

Release historycaution

This is the only registry release, published 567 days ago, with no releases in the last 12 months. That limited history makes ongoing maintenance harder to establish.

Repo bus factorcaution

One contributor made 100% of the recent commits. With user-owned project backing rather than an organization, this leaves maintenance dependent on a single active contributor.

Repo commit activitycaution

The repository recorded only 2 commits in the last 3 months. Recent activity exists, but the volume is too low to demonstrate a strong maintenance cadence.

Security policycaution

The repository has no security policy. For an API integration package handling credentials and HR data, that reduces transparency around vulnerability reporting.

Workflow auditcaution

All 5 referenced actions are unpinned, and the audit found one high-confidence medium-severity archived action. The workflow has no untrusted trigger or script-injection finding, which limits the impact to hygiene and supply-chain caution.