@tediousjs/connection-string

Repo bus factorcaution

All recent commits came from one contributor, creating a real continuity risk. Organization ownership provides some handoff capacity, but no second recent contributor is evidenced here.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for consumers and maintainers.

Workflow auditcaution

The single workflow has read-only permissions and no untrusted checkout or script-injection findings, but all 10 action references are unpinned and the audit found five high-confidence adhoc-package findings. These are workflow hygiene concerns, not evidence of a severe release risk.