text-extensions

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated maintainer base carries more continuity risk.

Release historycaution

The package has 21 releases over more than 11 years, but it has had no registry release in the last 12 months. The linked repository was pushed recently, partly compensating for the slow release cadence.

Repo bus factorcaution

All one recent commit came from a single contributor, leaving maintenance dependent on one person and increasing continuity risk.

Workflow auditcaution

The sole workflow was fully analyzed with no high- or medium-confidence findings, untrusted checkouts, or script injections. However, both action references are unpinned, which weakens build reproducibility.