@asyncapi/specs

Repo bus factorcaution

All 3 recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance to others, but no second recent contributor is shown.

Repo commit activitycaution

Only 3 commits were recorded in the last three months, indicating modest recent source activity, but the release history and recent repository push provide compensating evidence.

Workflow auditcaution

All 24 workflows were analyzed, with read-only permissions in 23 and no untrusted checkout or script-injection findings. However, several high-confidence archived-action and ad hoc package findings remain, and 17 of 96 action references are unpinned; the low-confidence cache finding is only hygiene.