@chevrotain/types

Repo bus factorcaution

One contributor made all 14 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown to reduce the immediate bus-factor concern.

Repo commit activitycaution

The repository recorded 14 commits in the last 3 months, but all were made by one active maintainer, leaving maintenance capacity concentrated.

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, so the link is less transparent; the mismatch may reflect a monorepo, but the missing README mention remains a caution.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

All 7 analyzed action references are unpinned and one workflow grants top-level write permissions. The two cache-poisoning findings are low-confidence hygiene warnings, so the overall workflow impact is a caution rather than a severe risk.