transom/craft-site-tint

Release historycaution

The package is young, with two releases over about six months and roughly 111 days between releases. This is limited maturity evidence, but it does not indicate abandonment because the latest release is recent.

Repo bus factorcaution

All 8 recent commits came from one contributor, creating concentration risk. Organization ownership provides some ability to hand maintenance to another person, partly compensating for that weakness.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but not evidence that the package is unsafe to use.

Workflow auditcaution

The only workflow was fully analyzed with no audit findings, no untrusted checkout, and job-level permissions; however, its sole action reference is unpinned, reducing build reproducibility.