ob1

Repo package mentioncaution

The repository name does not match ob1 and its README does not mention the package. Although name differences can be normal in monorepos, the absence of any package mention raises a genuine concern that the repository link may not actually support this release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures unclear. Its active maintenance and Dependabot use reduce but do not remove this transparency gap.

Token permissionscaution

Three workflows declare read-only permissions, but one workflow has no top-level permissions declaration. This is a modest workflow-hygiene gap rather than evidence of excessive access.