@jsep-plugin/assignment

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent pull-request activity partly compensates, but the lack of commits still weakens evidence of ongoing maintenance.

Repo toolingcaution

The project uses Rollup and npm scripts, showing an established build process, but no security-scanning tools were detected, leaving a modest assurance gap.

Workflow auditcaution

Both workflows were fully analyzed with no detected findings, unsafe triggers, untrusted checkouts, or script injection. However, all eight action references are unpinned, which weakens build reproducibility and update safety.