dayjs

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated contributor activity is not offset by visible organizational backing.

Repo bus factorcaution

Two contributors were active recently, but the primary contributor made about 86% of the seven commits, leaving maintenance substantially concentrated.

Repo issue activitycaution

The repository has substantial open issue and pull-request backlogs; recent pull-request activity is present, but only three pull requests were merged in the last month, suggesting some review backlog.

Security policycaution

No SECURITY.md or equivalent security policy was found, reducing transparency about vulnerability reporting and response procedures.

Token permissionscaution

All three workflows lack top-level token permissions declarations, which is a workflow-hardening gap even though none declares top-level write permissions.