vielhuber/keepassmcp

Release historycaution

The package is only 37 days old, with four releases clustered over about six days. This shows active initial publishing but provides little evidence of sustained maintenance.

Repo bus factorcaution

All four commits in the last three months came from one contributor, giving the project a fragile maintenance base. The linked repository is clearly associated with the package, but no second active contributor is shown.

Security policycaution

The repository has no security policy. For a package that handles KeePass databases and passwords, this is a meaningful transparency and response gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. That leaves routine CI inputs exposed to changing upstream code.