@octokit/types

Repo bus factorcaution

All recent commits came from one contributor, concentrating short-term maintenance capacity. Organization ownership provides some handoff capacity but does not remove the current concentration.

Repo commit activitycaution

Only 2 commits from 1 active maintainer were recorded in the last 3 months. Recent releases partly compensate, but current source activity is thin.

Workflow auditcaution

All 7 workflows were analyzed, but all 18 action references are unpinned, three workflows use high-confidence blanket GitHub App permissions, and one installs an ad hoc package. Pull request target triggers have no untrusted checkout or script-injection sinks, limiting the immediate severity.