This looks... Interesting and also weirdly suspicious. It's "made by Backbone". Backbone appears to be an enterprise security startup (?) but it's unclear because the website tells you almost nothing about the companies history, finances, or who makes up the company.

The committers appear to be "Backbone Authors". The organizations membership is not visible.

With something like this, trust is vital. I need to be able to trust the code now and into the future. For trust, transparency is key. And this project has zero transparency.

For all I know, this could be a state actor trying to lay the foundation for future backdoors.