@ast-grep/napi

Repo bus factorcaution

One contributor made about 85% of recent commits, creating concentration risk. The organization-owned repository and six additional active contributors partly compensate, so this remains a caution rather than a severe risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @ast-grep/napi, so the package-to-repository relationship is less transparent. The monorepo context makes a name mismatch understandable, but the missing README mention remains a caution.

Repo toolingcaution

No build or security-scanning tools were detected in this signal, leaving security and build-process transparency weaker than the otherwise active project evidence.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and disclosure expectations unspecified.

Version stabilitycaution

Version 0.50.0 is not a stable major release, so compatibility expectations are somewhat lower, but it is a regular rather than prerelease version and recent releases contain no prerelease share.