decamelize

Project backingcaution

The repository is owned by a named individual rather than an organization, so the concentrated maintainer base offers less apparent handoff capacity.

Release historycaution

The package has existed for about 11 years and has 15 releases, but it had no registry release in the last 12 months. The long history supports maturity, while the recent pause warrants caution.

Repo bus factorcaution

All recent commits came from one contributor, leaving a concentrated maintenance path. The long-lived, clearly matching repository provides some context but does not remove this concern.

Repo commit activitycaution

Only one commit was recorded in the last three months from one active maintainer. The recent repository push is reassuring, but the low activity supports a maintenance caution.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write-wide permissions. However, both of its two action references are unpinned, leaving a modest reproducibility and dependency-integrity gap.