intl-tel-input

Maintainerscaution

Only one registry account has publish access. That is a concentration risk, although repository activity shows broader recent participation.

Repo bus factorcaution

Eight contributors were active in 3 months, but the leading contributor made about 70% of commits; a second contributor contributed about 19%, so concentration remains a caution rather than a severe abandonment signal.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

Both workflows were analyzed, with no untrusted checkout or script-injection findings, and permissions are scoped or read-only. However, all 6 action references are unpinned, the audit had one failed file, and a low-confidence cache-poisoning finding was reported; these are workflow hygiene concerns, not evidence of an unsafe release.