xpocketmp/bedrock-data

Repo package mentiondanger

The repository name does not match the package name, and its README does not mention the package. That leaves uncertainty about whether the linked source actually builds this release.

Repo bus factorcaution

One contributor made 75% of the 8 recent commits, so activity is concentrated. Two additional contributors remain active, and organization backing provides some handoff capacity.

Security policycaution

The repository has no security policy. This is a transparency and incident-handling gap, although it is not evidence that the package is unsafe.