@docusaurus/plugin-css-cascade-layers

Repo bus factorcaution

One contributor made about 97% of the recent commits, creating a real continuity concern. The organization-owned project and two additional active contributors partly reduce that risk.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-repository link is less transparent. The monorepo context makes a name mismatch ordinary, but the missing README mention remains a caution.

Workflow auditcaution

All 17 workflows were analyzed and all 76 action references are pinned, with no untrusted checkouts or script-injection findings. High-confidence template-injection findings and repeated ad hoc package installs still warrant workflow-hygiene caution, while the trusted-publishing finding is informational.