chalk-template

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single active person despite the organization-owned repository.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, which shows some activity but indicates a currently slow maintenance pace.

Repo toolingcaution

The repository reports no build tool or security scanning tool. This is a modest transparency and hygiene gap, though the package is small and the source is straightforward.

Workflow auditcaution

The sole workflow was fully audited with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Both action references are unpinned, which weakens reproducibility and supply-chain hygiene.