@algolia/client-abtesting

Maintainerscaution

The package has 21 publish-access accounts, with 14 using the algolia.com domain, consistent with organization-backed publishing. The consumer-domain accounts vincentalindogan, fluf, eric-zaharia, sylvain, and samykettani, plus outside-domain accounts haroen and tkrugg, are account-hygiene cautions but do not establish a maintenance bus-factor problem.

Security policycaution

The repository has no SECURITY.md or equivalent security policy, leaving vulnerability-reporting expectations less transparent despite the presence of security scanning tooling.

Workflow auditcaution

All three workflows were analyzed successfully, all four action references are pinned, and no audit findings or untrusted checkouts were reported. One workflow grants top-level write permissions, a mild scope concern, but no untrusted sink reaches it.