spomky-labs/aes-key-wrap

Release historycaution

The package has 18 releases since 2015, but none in the last 12 months and the latest release was nearly five years ago. This is strong evidence of stalled maintenance for a dependency that may need ongoing fixes.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. The stable version and complete project structure partly reduce the impact, but do not demonstrate current maintenance capacity.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

All five workflows were analyzed without high-severity findings, dangerous triggers, or write-wide permissions. However, all 10 action references are unpinned, leaving the build exposed to upstream reference changes and weakening reproducibility.