zaphyr-org/encrypt

Release historycaution

The package has had no registry release in the last 12 months, and its latest release was nearly three years ago; this is a meaningful maintenance concern despite four releases overall.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection, which weakens evidence of ongoing maintenance despite the repository's non-archived status.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no formal security policy; the README provides an email contact, which partly compensates but is less actionable for coordinated disclosure.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, but all seven action references are unpinned, making build inputs less reproducible and harder to control.