knitwork

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, which is a meaningful maintenance concern even though a recent push timestamp is present.

Repo toolingcaution

The project uses TypeScript, unbuild, npm scripts, and esbuild, showing an established build process, but no security-scanning tooling was detected.

Security policycaution

No security policy was found in the repository, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings and appropriate read-only or scoped permissions, but five of six action references are unpinned, leaving avoidable build-integrity risk.