dependency-tree

Repo bus factorcaution

One contributor made all recent commits, concentrating current maintenance on a single person; organization ownership provides some ability to hand off maintenance but does not remove the present concentration.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, so recent development activity is modest despite the recent release.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent for consumers.

Workflow auditcaution

All three workflows use read-only permissions and the audit found no high- or medium-severity issues, but all 7 action references are unpinned, weakening build reproducibility and update safety.