@npmcli/node-gyp

Repo bus factorcaution

One contributor made 100% of the commits in the last 3 months. Organization backing reduces handoff risk, but the observed recent activity is still concentrated.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, showing limited recent development activity. The recent release partly offsets this, but the maintenance signal remains weak.

Workflow auditcaution

All 8 workflows were analyzed, but all 38 action references are unpinned, and 4 workflows grant top-level write permissions. High-confidence template-injection findings and a medium-confidence bot-condition finding add workflow hygiene concerns, though no untrusted checkout or script-injection sink was observed.