zncrypt/pki

Release historydanger

The latest release was in November 2020, with no releases in the last 12 months despite eight total releases. Nearly six years without a release is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, while its last push was in August 2022. This indicates several years of inactive development.

Package scaffoldingcaution

The artifact has a README, the repository has tests, and this version has a GitHub release, which provide some evidence of project structure and release documentation. However, the published README is only five characters long and offers little consumer guidance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a package handling certificates, keys, and signatures, that is a meaningful maintenance and assurance gap.

Security policycaution

The linked repository has no security policy. That limits transparency about reporting and handling vulnerabilities in security-sensitive code.