agencenous/blocss

Repo bus factorcaution

One contributor made all six recent commits, leaving a clear continuity risk; organization backing provides some capacity for handoff but no second active contributor is shown.

Repo commit activitycaution

Six commits in the last three months show ongoing work, but activity is modest and comes from only one active maintainer.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations unclear.

Version stabilitycaution

Version 0.3.4 is not a stable major release, so the public API may still change despite the absence of prereleases.

Workflow auditcaution

The audited workflow is complete and has no untrusted checkout or script-injection findings, but all three action references are unpinned and trusted publishing uses a long-lived token; the low-confidence cache findings are hygiene concerns only.