@globalart/nestjs-grpc

Repo bus factorcaution

One contributor owns 100% of recent commits. Organization backing partly compensates because maintenance can potentially be handed off, but the observed activity still shows a thin current contributor base.

Repo commit activitycaution

The repository recorded 17 commits in the last three months, but all came from one active maintainer, leaving maintenance continuity dependent on a single contributor.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @globalart/nestjs-grpc, so the source-package relationship is not clearly demonstrated. The broader repository is a monorepo, which makes a name mismatch ordinary but does not resolve the missing README reference.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

Both workflows were analyzed with no injection or high-severity findings, but four of five action references are unpinned and one workflow grants top-level write access; without untrusted triggers these are workflow-hygiene concerns rather than severe risks.