vanderlee/multibyte

Project backingcaution

The package and repository are owned by the same individual, confirming direct ownership but offering no organizational maintenance redundancy.

Release historycaution

Only two releases exist across roughly 10 years, with a long gap between them; however, one release arrived in the last 12 months, so this is a modest maturity concern rather than abandonment evidence.

Repo bus factorcaution

All 34 recent commits came from one contributor, and the repository owner is an individual rather than an organization; this creates a genuine maintenance-continuity concern.

Security policycaution

No repository security policy was found, which is a minor transparency gap for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions with no dangerous triggers or audit findings. However, both action references are unpinned, leaving avoidable build-reproducibility and action-update risk.