which

Repo bus factorcaution

All recent repository commits came from one contributor, creating a concentrated short-term maintenance path. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, which indicates limited recent development activity. The recent release and current repository state partly compensate, but this remains a maintenance concern.

Token permissionscaution

All workflows declare permissions explicitly, although 4 release-related workflows request top-level write access. The explicit declarations and organization-backed release automation make this acceptable, but the write scope is worth reviewing.