normalize-url

Project backingcaution

The repository is owned by a user rather than an organization, so the concentrated recent contributor activity is not offset by visible organizational backing.

Repo bus factorcaution

All recent commits came from one contributor, so maintenance is concentrated and continuity depends heavily on that person.

Repo toolingcaution

No build tool or security-scanning tool was detected. This is a modest transparency and maintenance-hygiene gap, not evidence of abandonment by itself.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or write permissions, but both of its two action references are unpinned, weakening build reproducibility.