builtin-modules

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-maintainer concentration represents a genuine continuity limitation.

Repo bus factorcaution

All recent commits come from one contributor, creating a single-person continuity risk; the long release history and current release provide some compensation but do not remove it.

Repo commit activitycaution

One commit was made in the last three months by one active maintainer, which is consistent with a small static package but indicates limited recent maintenance capacity.

Repo toolingcaution

No build or security scanning tools were detected. This is a minor transparency gap for a simple data package, with no evidence here of unsafe workflows.

Token permissionscaution

Neither workflow declares top-level token permissions, leaving least-privilege behavior less explicit even though no top-level write permissions were detected.