@octokit/oauth-app

Repo bus factorcaution

One contributor made 100% of the last three months' commits. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only 3 commits were made in the last 3 months, with activity from one maintainer; this is active but thin recent maintenance capacity.

Workflow auditcaution

All six workflows were analyzed without high-confidence audit findings or untrusted checkouts, but all 14 action references are unpinned and two workflows have top-level write permissions. These are hygiene and reproducibility concerns without a detected untrusted sink.