yolorouter/llmasking-php

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no provided organizational backing to offset the single-contributor concentration.

Release historycaution

This is the package's first release, published 0 days ago, with only one release recorded. That leaves maintenance maturity and long-term stability unproven.

Repo bus factorcaution

One contributor made all 14 commits in the last 3 months, giving the project a single-person bus factor. That increases continuity risk for a new package without organizational backing.

Security policycaution

The repository has no security policy. For a library explicitly handling sensitive data and credentials, this is a meaningful transparency and vulnerability-reporting gap.

Workflow auditcaution

All 3 of 3 workflow action references are unpinned, reducing build reproducibility and making action changes less controlled. The audit found no untrusted checkouts, script injection, high-severity findings, or incomplete analysis, which limits the concern to workflow hygiene.