@peculiar/asn1-x509

Repo bus factorcaution

Four contributors were active, but one made 87.5% of the recent commits. Organization backing partly offsets this concentration, though continuity still depends heavily on one contributor.

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts, showing established build and test tooling. No security scanning tools were detected, which is a modest hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully and no untrusted checkout or script-injection path was found, but all 9 action references are unpinned. High-confidence template-injection findings in the release workflow are hygiene concerns here because no dangerous trigger or sink was reported.