mimmi20/ua-normalizer

Project backingcaution

The registry and repository are owned by the same individual, so the package identity is consistent, but there is no organization backing to offset the concentrated maintainer base.

Repo bus factorcaution

One contributor made 100% of the 33 recent commits. The active cadence is reassuring, but this concentration creates a real continuity risk for a user-owned project.

Repo commit activitycaution

There were 33 commits in the last three months, demonstrating current development activity, although all were made by one active maintainer.

Security policycaution

The repository has no security policy. This is a modest transparency gap for a maintained library, despite the presence of automated security scanning.

Workflow auditcaution

All eight workflows were analyzed without high- or medium-severity findings and no untrusted checkout or script-injection paths were found. However, all 12 action references are unpinned and four workflows grant top-level write permissions, creating workflow hygiene concerns.