carbon/colorpicker-oklch

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This indicates a current maintenance pause and raises the risk that issues or compatibility changes may not receive prompt attention.

Security policycaution

No repository security policy is provided. For a small package this is a transparency gap, though it is less severe than evidence of abandoned or unsafe release practices.

Workflow auditcaution

The sole workflow has a pull_request_target trigger without an untrusted checkout or script-injection sink, so that trigger is not dangerous here. However, both action references are unpinned and the workflow grants top-level write access, creating moderate workflow hygiene and permission concerns.