zf1s/zend-crypt

Package scaffoldingcaution

The artifact has a README but no tests or changelog, and the repository also lacks both. For a cryptography-related library, the absence of visible tests is a genuine maintenance and confidence gap.

Repo bus factorcaution

All one recent commit came from a single contributor, creating concentration risk. Organizational ownership provides some handoff capacity, but no second active contributor is shown.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, so there is little external usage evidence. Popularity is supporting evidence rather than a decisive health measure, especially given the package's long release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency gap for a cryptographic library, though it is not by itself evidence of unsafe code.

Security policycaution

The repository has no security policy. For a cryptography-related package, the lack of documented vulnerability-reporting guidance is a meaningful transparency gap.