@otplib/plugin-base32-scure

Repo bus factorcaution

One contributor made 16 of 17 recent commits, leaving maintenance heavily concentrated despite a second active contributor.

Workflow auditcaution

All seven workflows were analyzed, use read-only permissions, and pin all 58 action references. Two high-confidence template-injection findings remain in mutation and release workflows, warranting workflow review even though no untrusted checkout or injection trigger was reported.