cline/morphism

Maintainerscaution

Only one registry account has publish access, which concentrates publishing responsibility, although the linked repository provides direct ownership context.

Project backingcaution

The registry namespace and repository owner differ, and the repository is owned by an individual rather than an organization; this offers limited visible institutional backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance warning despite the package's recent release history.

Repo toolingcaution

The repository uses Composer and Just for build tooling, but no security scanning tool was detected, leaving a modest hygiene gap.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all 8 action references are unpinned, weakening build reproducibility and update safety.