mimmi20/mezzio-navigation-laminasviewrenderer-bootstrap

Maintainerscaution

Only one registry account has publishing access, creating concentration risk. This is partly offset by the repository's recent release and commit activity, but the publishing base remains narrow.

Project backingcaution

The registry namespace and repository are owned by the same individual account, confirming ownership alignment but offering less continuity assurance than organization backing.

Repo bus factorcaution

All five recent commits came from one contributor, so maintenance could be disrupted if that person becomes unavailable. The individual-owned project backing does not provide evidence of organizational handoff capacity.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting and response expectations less transparent.

Token permissionscaution

All workflows declare permissions, and half use read-only permissions; four workflows request top-level write access, which is broader than ideal but is explicitly configured rather than left unspecified.