@conventional-changelog/template

Repo bus factorcaution

One contributor made about 91% of recent commits, creating concentration risk; organization ownership and five additional contributors provide some capacity for handoff but do not remove the concern.

Repo toolingcaution

The project uses TypeScript, Vite, and npm scripts for builds, but no security-scanning tools were detected, leaving a modest verification gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All five workflows were analyzed with no injection or high-confidence audit findings, but all 37 action references are unpinned and one workflow grants top-level write permissions. The organization-backed active project partly offsets the workflow hygiene concern, while the lack of untrusted triggers keeps it from being severe.