vanilla/garden-sites

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only 2 commits were made in the last 3 months by 1 active maintainer. Recent releases partly offset the low commit volume, but the repository's direct maintenance activity is thin.

Security policycaution

No security policy was found, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though it is not enough on its own to outweigh the package's active release history and repository controls.