fontkitten

Repo bus factorcaution

All recent commit activity comes from one contributor, so maintenance continuity depends heavily on that person.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is modest for an actively released package and leaves some uncertainty about ongoing maintenance.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. The build setup is clear, while security-process visibility is limited.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the package is unsafe.