@mantine/core

Repo bus factorcaution

Although 17 contributors were active, the top contributor made about 87% of commits in the last 3 months. Organization ownership provides some handoff capacity, but the practical maintenance base remains concentrated.

Repo toolingcaution

The project uses established build tools, but no security-scanning tools were detected; this is a modest process gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures for a widely used library.

Workflow auditcaution

All three workflows use read-only permissions, have no untrusted checkout or script-injection findings, and only 2 of 18 action references are unpinned. The one high-confidence low-severity finding installs a package outside a lockfile, so this is a minor hygiene concern.