kdbush

Project backingcaution

The repository is owned by an individual rather than an organization, so the small maintainer base represents some continuity risk, though it is not evidence of abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a maintenance caution, although the recent release and repository push provide some counterevidence.

Repo toolingcaution

The project uses TypeScript, Rollup, and npm scripts, showing a defined build process, but no security scanning tools were detected.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous sinks or audit findings, but both action references are unpinned, leaving them exposed to upstream changes.