twbs/bootstrap

Release historycaution

The package is mature, with 80 releases over more than 10 years, but only 1 release in the last 12 months indicates a sparse registry release cadence.

Version stabilitycaution

The assessed version is v6.0.0-alpha.1, so it is explicitly prerelease and carries more compatibility risk than a stable release, despite being the current latest version.

Workflow auditcaution

All 14 workflows were analyzed with no untrusted checkouts, script injection, writable top-level permissions, or unpinned action uses. The high-confidence use-trusted-publishing findings are a supply-chain hygiene concern, though they were informational and not accompanied by a dangerous workflow sink.