@node-minify/core

Maintainerscaution

Only one registry account has publish access. This is a modest operational concentration concern, although the linked repository also shows ongoing activity from that maintainer.

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no organizational handoff capacity to offset the concentrated maintainer activity.

Repo bus factorcaution

All 26 commits in the last three months came from one contributor, creating a genuine maintenance continuity risk; the risk is partly moderated by the repository's active release and pull-request activity but remains a caution.

Token permissionscaution

Two workflows lack top-level permissions and two declare top-level write access, so workflow permission hygiene is not uniformly minimal; this is a limited caution rather than a severe health issue because no dangerous workflow patterns were observed.