@globalart/zod-to-proto

Repo bus factorcaution

One contributor made 100% of the recent commits. Organization backing partly compensates because maintenance can be handed off, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 17 commits in the last three months, but only one active maintainer made them, limiting demonstrated maintenance depth.

Repo package mentioncaution

The repository name does not match the package, and its README does not mention the package, so the linkage is not demonstrated even though a package-specific documentation page appears in the repository tree.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented; this is a transparency gap, though it is not by itself severe.

Workflow auditcaution

Both workflows were fully analyzed with no reported findings or untrusted checkouts. However, four of five action references are unpinned and one workflow grants top-level write permissions, creating a workflow-hygiene caution without an observed exploit path.