vanqard/passman

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single-contributor concentration has no visible organizational handoff support.

Repo bus factorcaution

All recent commits came from one contributor, so maintenance continuity depends heavily on a single person.

Repo commit activitycaution

Two commits were made in the last three months, showing recent activity, but the volume is modest and does not demonstrate a broad maintenance effort.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations unclear for a security-sensitive password-hashing library.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous sinks or high-severity findings, but all four analyzed action references are unpinned, weakening build reproducibility and update safety.