stylelint-order

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, so consumers have less evidence connecting the artifact to its source build.

Maintainerscaution

Only one registry account has publish access, and the repository is owned by an individual rather than an organization, leaving limited publishing redundancy.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, a meaningful maintenance-capacity concern even though a release was published during the assessment period.

Repo toolingcaution

No build tool or security scanning tool was detected in the repository, reducing evidence of automated build and security hygiene.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.