@casl/ability

Repo bus factorcaution

One contributor made all 8 recent commits, creating a meaningful continuity risk if that maintainer becomes unavailable.

Repo commit activitycaution

There were 8 commits in the last 3 months, but all came from one active maintainer, so activity is present yet concentrated.

Repo toolingcaution

The project uses TypeScript and npm-based build tooling, but no security scanning tools were detected, leaving a modest transparency gap.

Security policycaution

No repository security policy was found, which makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

All 9 analyzed action references are unpinned, and one low-confidence high-severity github-env finding was reported; there were no untrusted checkouts or script injections, so this is workflow hygiene rather than a severe dependency risk.