postcss-js

Repo bus factorcaution

One contributor made all three commits in the last three months, creating concentration risk; the organization-owned project provides some capacity to hand off maintenance.

Repo commit activitycaution

Three commits were made in the last three months, showing recent activity, although all came from one active maintainer.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected. This is a modest transparency gap, not a severe dependency-health concern by itself.

Security policycaution

No repository security policy was found, reducing guidance for reporting and handling vulnerabilities, though this does not show abandonment or unsafe code.