cline/coding-standard

Dependency profilecaution

The package declares 16 runtime dependencies, many of them development and tooling packages, creating a relatively broad dependency surface for a coding-standard package.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.

Repo bus factorcaution

All five recent commits came from one contributor, so maintenance depends heavily on a single person.

Repo toolingcaution

The repository uses Just and Composer build tooling, but no security-scanning tools were detected, leaving a modest transparency gap.

Workflow auditcaution

The complete audit found no high- or medium-severity findings and no untrusted checkouts or script injection, but all 8 action references are unpinned, weakening build reproducibility.