css-declaration-sorter

Maintainerscaution

Only one registry account has publish access, which creates a thin publishing base; the matching repository and recent releases provide some compensation.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a maintenance warning despite the recent release activity.

Repo toolingcaution

The repository uses build tooling, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were analyzed without failed files or high-severity findings, and one scopes permissions at job level. However, all 5 action references are unpinned and one workflow has top-level write permissions, creating reproducibility and permissions-hygiene concerns.