@sidvind/better-ajv-errors

Project backingcaution

The repository is owned by a user rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single person and increasing continuity risk.

Repo commit activitycaution

There was one commit in the last 3 months from one active maintainer, indicating recent activity but a very low maintenance volume.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

All five workflows were analyzed, all 16 action references are pinned, and no untrusted checkout or broad top-level write permission was found. Two high-confidence template-injection findings in dependabot.yml are a workflow hygiene concern, although the audited trigger data does not show a pull_request_target or workflow_run sink.