@node-minify/terser

Maintainerscaution

Only one registry account has publish access. This is a modest publishing continuity concern, although the linked repository shows ongoing activity from that maintainer.

Project backingcaution

The source repository is owned by a user rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.

Repo bus factorcaution

The repository had one contributor responsible for 100% of commits during the last 3 months, creating meaningful continuity and abandonment risk for a user-owned project.

Repo commit activitycaution

There were 26 commits in the last 3 months, showing active development, but all were produced by one maintainer.

Token permissionscaution

Two workflows lack top-level permission declarations and two workflows request top-level write permissions, leaving some permissions broader or less explicit than ideal despite other permission controls.