starburst/encrypted-config-loader

Release historycaution

Three releases over about 10 months, including the latest release roughly five months before collection, show some release activity but not a strong ongoing cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of active maintenance despite the recent release history.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the thin maintenance evidence.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that manages encrypted configuration.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned. The absence of a top-level permissions block is acceptable on its own.