is-plain-object

Repo bus factorcaution

Three contributors were active recently, but one supplied 75% of commits, leaving maintenance somewhat concentrated despite meaningful secondary participation.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkout or script-injection findings, and all 8 action references are pinned. The release workflow has high-severity low-confidence cache-poisoning and high-confidence adhoc-package findings, plus top-level write permissions, so workflow hygiene is a minor concern.