color-space

Lifecycle scriptscaution

A prepare script runs during installation or package preparation. This is a mild operational consideration, but the signal provides no evidence that it performs unsafe work.

Security policycaution

No repository security policy was found, leaving disclosure and response guidance undocumented. This is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

All four workflows were analyzed without failed files or untrusted checkouts, and no audit findings were reported. However, all 15 action references are unpinned and two workflows grant top-level write permissions, creating avoidable CI maintenance and tampering exposure.