cable8mm/view-transformer

Release historycaution

The package is 567 days old with 14 releases, but only one release appeared in the last 12 months. Recent publishing is therefore slower than its earlier history suggests.

Repo bus factorcaution

All 6 commits in the last 3 months came from one contributor, giving the project a concentrated maintenance base. The user-owned repository provides no organizational handoff signal to offset that concentration.

Security policycaution

The repository has no security policy. This does not prove a security problem, but it weakens the project's documented process for handling vulnerabilities.

Workflow auditcaution

All 11 analyzed action references are unpinned, and one workflow grants top-level write permissions; however, there are no untrusted checkouts, script injections, or auditor findings. This is a workflow hygiene concern rather than a severe risk.