@node-minify/utils

Repo bus factorcaution

One contributor made all 26 commits in the last three months, creating a genuine maintenance-continuity risk for a user-owned project without organization-level backing.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @node-minify/utils. Because this can make package-to-source ownership less transparent, it warrants caution, although the package description identifies it as a shared utility for the node-minify project.

Token permissionscaution

Two workflows lack top-level permissions and two declare top-level write permissions, leaving some least-privilege hygiene gaps in CI configuration despite the absence of dangerous workflow patterns.