cropperjs

Repo bus factorcaution

All 47 commits in the last three months came from one contributor, creating a meaningful continuity risk despite the strong recent activity.

Repo toolingcaution

The project uses TypeScript, Rollup, and npm scripts, but no security scanning tools were detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented for consumers and maintainers.

Workflow auditcaution

All 11 analyzed action references are unpinned, which weakens build reproducibility; high-confidence template-injection findings are hygiene concerns, while the low-confidence cache findings carry limited weight.