lendable/name-parser

Release historycaution

There are three releases, all published on the same day, so the registry history shows limited release-cadence evidence despite the repository being recently updated.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving concentration as a maintenance caution.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear for a dependency intended for production use.

Workflow auditcaution

All workflows were analyzed with no unpinned actions or untrusted checkouts, but a high-confidence finding reports a GitHub App token inheriting blanket installation permissions in the release workflow.