sass-lookup

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership provides some capacity to hand maintenance off.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, so ongoing maintenance activity is limited despite the recent release.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent.

Workflow auditcaution

All 3 workflows were analyzed successfully, use read-only permissions, and have no dangerous triggers or audit findings. However, all 7 action references are unpinned, which is a supply-chain hygiene weakness.