akh/typograf

Release historycaution

The package has 18 releases since May 2021 and a release in the last year, but only one release in the past 12 months indicates a slower current cadence.

Repo bus factorcaution

All recent commit activity comes from one contributor, leaving maintenance dependent on a single active person.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent maintenance activity despite the recent release.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The audit completed cleanly with no untrusted checkouts, injection findings, or write-permission concerns, but all 11 analyzed action references are unpinned, weakening build reproducibility.