clean-stack

Project backingcaution

The repository is owned by a named individual rather than an organization, so the single registry maintainer reflects a concentrated but identifiable ownership model.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months; the recent release partly offsets this, but the lack of ongoing activity is a maintenance caution.

Workflow auditcaution

The audit analyzed the sole workflow completely with no high- or medium-confidence findings and no untrusted checkout or script-injection path. However, both referenced actions are unpinned, leaving avoidable build reproducibility risk.