natural-compare-lite

Maintainerscaution

Only one registry account has publish access, creating concentration risk, but the linked repository is owned by an organization, which provides compensating project backing.

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the last 3 months, indicating currently quiet maintenance and a potential abandonment concern. This is partly offset by the recent release and recent repository push, but the signal still lowers confidence in active development.

Token permissionscaution

Both workflows omit top-level token permissions, so least-privilege intent is not explicit. No workflow requests top-level write access, which limits the severity of this hygiene gap.