alto/code-diff

Release historycaution

This is the only registry release, published about 8 months ago, so the package has limited release history despite recent repository activity.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance dependent on a single active person; organization backing partly helps but does not remove this concentration.

Repo popularitycaution

The repository has only 3 stars and 1 fork, so there is little external adoption evidence, though popularity is supporting rather than decisive evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving an avoidable assurance gap for a library that processes code and patches.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no high-confidence audit findings, but all 3 action references are unpinned, weakening build reproducibility.