@portabletext/toolkit

Repo bus factorcaution

All recent commits came from one contributor, creating a concentrated short-term maintenance risk. Organization backing provides some ability to hand off maintenance, so this is a caution rather than a severe abandonment signal.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, indicating notably low recent development activity despite the recent registry release history. This lowers maintenance confidence.

Workflow auditcaution

All five workflows were analyzed and use read-only permissions, but three high-confidence secrets-inherit findings and a high-confidence github-app finding expose credentials more broadly than necessary; 10 of 14 actions are also unpinned. The low-confidence cache finding is only hygiene.