brunocfalcao/blade-feather-icons

Maintainerscaution

Only one account has registry publish access. This is consistent with a user-owned project, but it leaves little publishing redundancy when combined with the repository's single recent contributor.

Repo bus factorcaution

One contributor made all 3 recent commits, giving the project a concentrated maintenance base. Because the repository is user-owned rather than organization-owned, there is no provided backing signal to offset that concentration.

Repo commit activitycaution

There were 3 commits in the last 3 months, showing recent activity, but all activity came from one maintainer. Maintenance is active but not broad.

Security policycaution

The repository has no documented security policy. This is a transparency gap for reporting and handling vulnerabilities, although GitGuardian scanning provides some compensating security tooling.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 4 action references are unpinned, leaving workflow dependencies less reproducible.