blade-ui-kit/blade-heroicons

Maintainerscaution

Only one registry account has publish access, which is a limited publishing base, but the repository and release activity provide compensating evidence of an established project.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer represents a relatively narrow formal backing base.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is a maintenance concern, although the repository was pushed recently and the package has a recent release.

Token permissionscaution

All three workflows lack top-level token permission declarations. No workflow has declared top-level write access, but explicit least-privilege permissions would improve CI transparency.