@whatwg-node/disposablestack

Repo bus factorcaution

One contributor made about 86% of recent commits; three others contributed, but their small shares leave maintenance concentrated.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, so the link does not clearly establish that this repository is the package's intended source.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Version stabilitycaution

The assessed version is a stable, non-prerelease 0.1.0, but 95% of recent releases were prereleases, which adds some adoption and compatibility uncertainty.

Workflow auditcaution

All five workflows were analyzed without trigger or script-injection sinks, but four high-confidence findings identify unpinned container images, leaving build inputs less reproducible.