carbon/alpine

Repo bus factorcaution

All seven recent commits came from one contributor, leaving maintenance dependent on a single active person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented. This is a transparency gap, though it does not outweigh the active release history.