@tanstack/react-table

Repo bus factorcaution

One contributor made about 79% of the 117 recent commits, creating concentration risk. The other five active contributors and organization backing partly compensate, so this remains a caution rather than a severe risk.

Security policycaution

The repository has no SECURITY.md policy, leaving vulnerability-reporting guidance less transparent than it could be. Active maintenance and security scanning provide partial compensation.

Workflow auditcaution

All five workflows were analyzed, use read-only permissions, and pin all 24 action references. One high-confidence low-severity finding reports an ad hoc package install outside a lockfile, a minor reproducibility concern.