@peculiar/asn1-x509

Repo bus factorcaution

One contributor made about 81% of the 27 recent commits, which creates concentration risk, although five other contributors were active and the repository is organization-owned.

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts, but no security-scanning tools were detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; active maintenance and organization ownership partly compensate but do not remove the gap.

Workflow auditcaution

All 9 analyzed action references are unpinned, and the audit found high-confidence template-injection patterns in the release workflow; no untrusted checkout or script-injection sink was detected, so this is workflow hygiene risk rather than a severe verdict.