camelcase-keys

Repo bus factorcaution

One contributor made all commits in the last 3 months, giving the project a concentrated maintenance base. The long release history provides some compensation, but not enough to remove the continuity concern.

Repo commit activitycaution

Only one commit was recorded in the last 3 months. The same-day release and repository push show current activity, but the recent implementation cadence is limited.

Repo toolingcaution

No build tool or security scanning tool was detected. This is a modest transparency and process gap, though the small, directly published package limits its significance.

Workflow auditcaution

All workflows were analyzed with no dangerous audit findings, no untrusted checkouts, and no script injections. Both action references are unpinned, which leaves some avoidable workflow supply-chain risk, while the absence of a top-level permissions block is not a problem on its own here.