decamelize-keys

Project backingcaution

The repository is owned by the identified individual maintainer rather than an organization, so the single registry maintainer reflects a narrow ownership base but is consistent with the repository ownership context.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. The current release and recent issue and pull-request activity partly compensate, but direct commit activity is thin.

Repo toolingcaution

The repository reports no build tool or security scanning tool. For this small package that is a transparency and hygiene gap, though the source tree and workflow provide some process evidence.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, script injection, or high-confidence findings, and it has no broad top-level write permission. Both action references are unpinned, creating a modest reproducibility and supply-chain hygiene concern.