satori

Lifecycle scriptscaution

A prepare install-time script is present, adding some supply-chain and installation complexity, though no additional adverse behavior is shown by the provided signals.

Repo bus factorcaution

Twelve contributors were active, but the top contributor made 75.9% of recent commits. The organization-owned repository provides some handoff capacity, so this is a moderate rather than severe concern.

Version stabilitycaution

Version 0.51.0 is a normal, non-prerelease release. The pre-1.0 major version signals API stability may be less guaranteed than for a stable-major package, but recent prerelease share is zero.

Workflow auditcaution

Both workflows were analyzed without failures or dangerous triggers, and permissions are scoped read-only or at job level. However, four of five action references are unpinned and a high-confidence low-severity finding reports an ad hoc package install outside a lockfile, creating a modest hygiene concern.