stylus-lookup

Repo bus factorcaution

One contributor made 100% of the two recent commits. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only two commits were made in the last three months, all by one maintainer. Recent release activity helps, but source maintenance is relatively light.

Security policycaution

The repository has no published security policy. Dependabot and CodeQL provide some compensating security process, so this is a limited transparency gap rather than a severe concern.

Type declarationscaution

No type declarations are published, which is a minor integration gap for TypeScript consumers of this JavaScript library. The README documents both ESM and CommonJS usage but does not compensate for missing types.

Workflow auditcaution

All three workflows use read-only permissions and the audit completed without findings or untrusted checkout and script-injection risks. However, all seven action references are unpinned, leaving workflow dependencies exposed to upstream changes.