@kolkov/angular-editor

Project backingcaution

The package and repository are owned by the same individual account, so the concentrated contributor base is not offset by organization-level backing.

Repo bus factorcaution

One contributor made all three commits in the last three months, concentrating current maintenance knowledge in a single person.

Repo commit activitycaution

Only three commits were recorded in the last three months, so direct commit activity is present but modest.

Workflow auditcaution

All three workflows grant top-level write permissions and all seven action references are unpinned; the audit also found a low-confidence cache-poisoning pattern, though there are no untrusted checkouts or script-injection findings.