suneditor

Maintainerscaution

Only one registry publishing account is listed, which is a concentration concern, although registry access records do not measure actual maintenance activity and the repository shows ongoing work.

Project backingcaution

The source repository is owned by an individual user rather than an organization, so there is no demonstrated organizational maintenance handoff to offset the concentrated contributor base.

Repo bus factorcaution

All 86 commits in the last 3 months came from one contributor, creating a genuine bus-factor and continuity concern for a user-owned project with no organizational backing shown.

Repo toolingcaution

The repository uses established build tools including TypeScript, Babel, webpack, and npm scripts, but no security-scanning tools were detected, leaving a security-hygiene gap.

Token permissionscaution

All 3 workflows lack top-level permissions declarations, which weakens least-privilege clarity; however, none declares top-level write permissions and one uses job-level permissions.