@electron/get

Lifecycle scriptscaution

A prepare script runs during package installation, adding build-time behavior that consumers should account for, though this is not severe by itself.

Repo bus factorcaution

All three recent commits came from one contributor, creating concentration risk; organization backing helps with handoff potential but does not remove the current single-contributor weakness.

Repo commit activitycaution

There were three commits in the last three months, showing recent activity, although the pace is modest for an actively maintained dependency.

Security policycaution

No repository security policy was found, reducing transparency for vulnerability reporting and response expectations.

Workflow auditcaution

All five workflows were analyzed, use read-only permissions, and pin all 13 action references, but a high-confidence template-injection finding remains in docs.yml. With no untrusted checkout or script-injection sink reported, this is a hygiene concern rather than a severe workflow risk.