@stryker-mutator/instrumenter

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the linkage is less transparent; the organization-backed monorepo context partly offsets that concern, but does not eliminate it.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security-scanning tools were detected; this is a modest repository-hygiene gap rather than evidence of abandonment.

Security policycaution

No repository security policy was detected, reducing transparency for vulnerability reporting and response expectations.

Workflow auditcaution

All four workflows were analyzed successfully, but all 10 action references are unpinned and the audit found two high-confidence template-injection findings; the findings are not paired with pull_request_target or workflow_run triggers, limiting their demonstrated impact.