@turf/square

Repo bus factorcaution

One contributor made about 71% of recent commits, creating some concentration risk, but 18 contributors were active and the repository is organization-owned, providing meaningful handoff capacity.

Repo package mentioncaution

The monorepo name does not match @turf/square and its README does not mention the package, which weakens direct repository attribution; however, the package README explicitly identifies it as part of Turfjs and points to that repository.

Workflow auditcaution

Both workflows were fully audited with no findings, all four action references are pinned, and no untrusted checkouts or script injections were found. One release workflow grants top-level write access, which is a mild permissions concern but not severe without an untrusted trigger or sink.