@astrojs/compiler

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk. The organization-owned repository provides some capacity to hand maintenance off, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only 1 commit from 1 active maintainer was recorded in the last 3 months, so the recent development sample is narrow despite the strong release history.

Workflow auditcaution

All 5 workflows were analyzed with no untrusted checkout or script-injection findings; however, a high-confidence template-injection finding appears in the release workflow and 3 of 26 action references are unpinned.