@stefanobartoletti/nuxt-social-share

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated maintainer activity is not offset by visible organizational backing.

Repo bus factorcaution

All 23 recent commits came from one contributor, so maintenance continuity depends heavily on a single person.

Repo toolingcaution

The project uses TypeScript and npm scripts for builds, but no security scanning tools were observed, leaving a modest tooling gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported.

Workflow auditcaution

All eight analyzed action references are unpinned and three workflows grant top-level write permissions. The low-confidence high-severity cache-poisoning finding is a hygiene concern, but no untrusted checkout or script-injection sink was found.