natural-compare

Release historycaution

The latest registry release was in July 2016, nearly 10 years before collection, with no releases in the last 12 months. This is a meaningful freshness and abandonment concern despite the package's long history.

Repo bus factorcaution

All three recent commits came from one contributor, giving the project a concentrated short-term maintenance base. Organization ownership provides some handoff capacity but does not remove the concentration concern.

Workflow auditcaution

Both workflows were analyzed without failures and have no untrusted checkout or script-injection paths, but all seven action references are unpinned and a high-confidence medium-severity secrets-inherit finding widens credential exposure.