@jest/snapshot-utils

Repo bus factorcaution

One contributor made about 96% of the 77 recent commits, creating a meaningful concentration risk; two additional contributors were active but contributed very little.

Repo package mentioncaution

The repository name differs from the package name and its README does not mention this package, so the package-to-repository link is less transparent than ideal; the organization-owned monorepo context partly explains the name mismatch but not the missing mention.

Repo toolingcaution

The project uses established build tools and has a build pipeline, but no security-scanning tools were detected, leaving a modest transparency gap.

Workflow auditcaution

All 11 workflows were analyzed, all 48 action references are pinned, and no untrusted checkout or script-injection paths were found. However, three workflows grant top-level write access and the audit flags high-confidence use of long-lived publishing credentials.