@jest/core

Repo bus factorcaution

Three contributors were active, but one made about 96% of the 73 recent commits; the organization backing provides some handoff capacity, yet recent activity remains highly concentrated.

Repo toolingcaution

The project uses established build tooling and has a repository security policy, but no automated security-scanning tool was detected, leaving a modest process gap.

Workflow auditcaution

All 11 workflows were analyzed, all 48 action references were pinned, and the pull_request_target workflow has no untrusted checkout or script-injection sink. Three workflows grant top-level write access, and the audit also reports trusted publishing; these are limited workflow-hygiene concerns.