@asteasolutions/zod-to-openapi

Lifecycle scriptscaution

A prepare install-time script is present, adding some execution surface during installation, although the available build and provenance signals provide context for a maintained package.

Repo bus factorcaution

All three recent commits came from one contributor, giving the project a concentrated short-term bus factor; organization ownership provides some handoff capacity but does not remove the current concentration.

Repo commit activitycaution

Only three commits were recorded in the last three months, all from one active maintainer, so current maintenance capacity is narrower than the strong release history suggests.

Repo issue activitycaution

The repository has recent pull-request activity, including four new pull requests in the last month, though none were merged and no issues were closed in that period.

Repo toolingcaution

The repository uses TypeScript, Rollup, webpack, and npm build tooling, but no security scanning tools were detected; the missing scanning is a modest transparency gap rather than evidence of abandonment.