@formatjs/intl-listformat

Repo bus factorcaution

One contributor made about 92% of the 194 recent commits, which creates concentration risk. The six active contributors and organization ownership partly compensate, but reliance on the top contributor remains a genuine caveat.

Repo toolingcaution

The repository uses established build tools, but no security-scanning tools were detected. This is a transparency and defense-in-depth gap, though it is outweighed by the repository's strong activity and other controls.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. This is a modest transparency gap rather than evidence of abandonment.

Token permissionscaution

Three workflows declare read-only permissions and none declare top-level write permissions, but nine omit top-level permissions declarations. The mixed configuration leaves some workflow privilege boundaries less explicit.