color-rgba

Repo bus factorcaution

All four recent commits came from one contributor, giving the project a thin recent contributor base. Organization backing provides some continuity, but the concentration remains a maintenance risk.

Repo toolingcaution

No build or security-scanning tools are detected. This is a modest transparency and assurance gap, although the package is a small JavaScript utility without a build step.

Security policycaution

The repository has no security policy. That weakens disclosure and maintenance transparency, though it is less consequential for a small, focused utility than for a service or security-sensitive package.

Type declarationscaution

No type declarations are included. This is a minor integration gap for consumers using TypeScript, but it does not by itself indicate abandonment or poor project health.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned. That leaves avoidable reproducibility and action-supply-chain hygiene risk.