postcss-safe-parser

Repo bus factorcaution

All one recent commit came from a single contributor, creating a narrow current activity base. Organization backing partly mitigates handoff risk, but no second recent contributor is shown.

Repo commit activitycaution

There was one commit in the last 3 months, so maintenance is currently sparse; the recent activity still provides evidence against complete abandonment.

Repo toolingcaution

The repository reports no build tools and no security scanning tools. The limited project may not require elaborate build tooling, but the absence of security scanning is a genuine hygiene gap.

Security policycaution

No repository security policy was found, reducing vulnerability-reporting transparency and response readiness.

Token permissionscaution

One release workflow lacks top-level token permissions, although no workflow declares top-level write permissions and another workflow is read-only; this is a limited workflow-hardening gap.