mute-stream

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership provides some capacity to hand maintenance off.

Repo commit activitycaution

The repository had one commit in the last three months, showing some activity but a sparse recent maintenance pace.

Type declarationscaution

No type declarations are published. This is a minor ergonomics gap for TypeScript consumers, but does not by itself indicate poor maintenance or abandonment.

Workflow auditcaution

All eight workflows were analyzed without untrusted checkouts or script-injection sinks, but all 38 action references are unpinned and four workflows grant top-level write permissions. High-confidence template-injection findings and a bot-condition finding add workflow hygiene risk, while organization backing is a partial compensating signal.