carbon/cbd

Package scaffoldingcaution

A substantial README documents features, requirements, installation, and usage, while both the artifact and repository lack tests and a changelog. For a small configuration and frontend-integration package this is a hygiene gap, but the repository's GitHub Releases provide some release transparency.

Repo bus factorcaution

One contributor made all 4 commits in the last 3 months, creating a concentrated bus factor. Organization ownership provides some handoff capacity, but no second recent contributor is evidenced.

Repo commit activitycaution

The repository received 4 commits in the last 3 months, showing active maintenance, but all recent activity came from one maintainer.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting guidance undocumented.

Token permissionscaution

The only workflow lacks a top-level permissions declaration, so its GitHub token permissions are less explicitly constrained than recommended; no top-level write permissions were detected.