@npmcli/map-workspaces

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership provides some maintenance capacity but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent development activity despite the recent release.

Workflow auditcaution

All eight workflows were analyzed, but all 38 action references are unpinned and three high-severity template-injection or bot-condition findings were reported. There are no untrusted checkouts or script-injection findings, and organization backing partly offsets the workflow concerns.