@testcontainers/postgresql

Repo bus factorcaution

One contributor made about 74% of recent commits, which creates concentration risk. Nine contributors were active, and organization backing provides some ability to hand maintenance off.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so ownership of this subpackage is less explicit than ideal. The organization-owned monorepo context makes a name mismatch ordinary, but the missing README mention remains a transparency gap.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All eight workflows were analyzed with no untrusted checkout or script-injection findings, but all 17 action references are unpinned. The audit also reported a medium-confidence template-injection finding; trusted publishing was informational and is not a concern by itself.