@number-flow/react

Repo bus factorcaution

Commit activity is highly concentrated: one contributor made 27 of 31 commits, despite 4 active contributors. The project is user-owned rather than organization-owned, so this concentration is a real continuity concern.

Repo issue activitycaution

There are open issues and pull requests, and one pull request was opened in the last month, although none were closed or merged during that period.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected; the build setup is credible while security automation is limited.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting guidance unclear.

Token permissionscaution

One release workflow lacks top-level token permissions, while the other declares read-only permissions; this is a workflow-hygiene gap but no top-level write permissions were detected.