nineteenfeet/nf-number-to-word

Release historycaution

The package is mature at over 13 years old, but only six releases and a median interval of about three years indicate a deliberately slow release cadence. A release in the last few months partly offsets the concern.

Repo bus factorcaution

All four recent commits came from one contributor, so maintenance depends heavily on a single person. Organization backing provides some handoff capacity but does not remove the concentration risk.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. For this small package, that is a modest transparency and hygiene gap.

Security policycaution

No repository security policy was found. This matters for reporting and response expectations, although the package is a small library with no observed security incident signal here.

Workflow auditcaution

Both workflows were analyzed with no audit findings or untrusted-code sinks, and one workflow uses read-only permissions. However, all four action references are unpinned and one workflow grants top-level write access, creating a moderate workflow-supply-chain hygiene concern.