capell-app/address

Licensecaution

The package declares a proprietary license, so licensing is explicit but may restrict use and redistribution for an open-source dependency.

Repo bus factorcaution

All 16 recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some backing but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented.

Version stabilitycaution

This release is a prerelease and all recent releases are prereleases, so consumers should expect a less stable API than a mature stable line.

Workflow auditcaution

The sole workflow combines pull_request_target, an untrusted checkout, and top-level write permissions; both action references are unpinned. The audit found no confirmed findings, but this combination warrants workflow hygiene caution.