flatbush

Repo bus factorcaution

One contributor made 100% of the recent commits, creating a concentrated maintenance dependency; the package remains actively released but has no demonstrated recent contributor diversity.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent development activity, although the release history provides compensating evidence.

Repo toolingcaution

The repository uses TypeScript, Rolldown, and npm scripts, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which is a workflow hygiene weakness.