boron/carbon

Release historycaution

Four releases in 40 days, with a median interval of about 1 day, show active early development. The short history means long-term maintenance is not yet established.

Repo bus factorcaution

All 31 recent commits came from one contributor, giving the project a complete single-person dependency for ongoing maintenance and review.

Security policycaution

The repository has no security policy. This is a transparency gap for a library intended to be integrated into applications, though it is not evidence of a security defect.

Version stabilitycaution

v0.2.0 is not a stable major release and half of recent releases were prereleases, so compatibility expectations remain limited.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkout or script-injection findings, but both of its action references are unpinned. That leaves avoidable build-integrity risk despite otherwise clean audit results.