google-protobuf

Repo bus factorcaution

All two recent commits came from one contributor, giving the project a concentrated short-term contributor base. Because the repository is owned by an organization, handoff capacity partly compensates, but the current activity remains thin.

Repo commit activitycaution

Only two commits were made in the last three months, indicating limited recent development activity. The recent release history and non-archived repository partly compensate, but maintenance capacity is still a concern.

Token permissionscaution

Four workflows declare read-only permissions, and none declare top-level write permissions. One publishing workflow lacks top-level permissions, leaving a small configuration gap, but no excessive write access was observed.

Type declarationscaution

No type declarations are included, which can reduce ergonomics for TypeScript consumers. This is a consumer convenience concern rather than evidence of abandonment for a JavaScript runtime library.