twitter/bootstrap

Release historycaution

The package has 79 releases and a roughly 40-day median interval, but none in the last 12 months despite the latest registry release being over a year old. Active repository work and exact-version release notes partly compensate, but registry freshness remains a caution.

Workflow auditcaution

All 16 workflows were analyzed with no untrusted checkouts, script injection, top-level write permissions, or unpinned actions. The high-confidence use-trusted-publishing finding indicates a long-lived registry token is used, creating a publishing-hygiene caution.