tiny-blocks/building-blocks

Repo bus factorcaution

All three recent commits came from one contributor, creating continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Three commits from one active maintainer in the last three months show ongoing work, though the volume is modest for a young project.

Repo popularitycaution

The repository has only 2 stars, no forks, and no watchers. This is weak supporting evidence, but popularity alone does not outweigh the active release and maintenance signals.

Workflow auditcaution

Both workflows were analyzed successfully with no high-confidence audit findings or untrusted checkouts, but all eight action references are unpinned and one workflow grants top-level write access. These are workflow-hygiene concerns rather than severe risks on their own.