@formatjs/intl-localematcher

Repo bus factorcaution

Six contributors were active, but the top contributor made about 92% of recent commits. Organization backing and additional active contributors reduce the risk, but the concentration remains a meaningful continuity concern.

Repo toolingcaution

The repository uses established build tools, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting guidance unclear despite the project's otherwise active maintenance.

Token permissionscaution

Nine of 12 workflows lack top-level permissions declarations, although none declare top-level write permissions and several use read-only or job-level permissions. The controls are mixed rather than clearly unsafe.

Version stabilitycaution

Version 0.9.0 is not a stable-major release, but it is not a prerelease and recent releases contain no prerelease versions, so this is only a modest maturity caveat.