@vercel/analytics

Repo bus factorcaution

One contributor made all 3-month commits, concentrating recent activity; organization backing partly offsets the handoff risk but does not remove it.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, so recent development activity is light despite the recent release and repository push.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkout, injection, or audit findings, and jobs scope permissions. All 6 action references are unpinned, which is a workflow hygiene caveat.