@trojs/openapi-server

Dependency profilecaution

Nine runtime dependencies make the package more exposed to dependency-chain changes than a minimal library, but the profile is not unusually large for an OpenAPI server.

Repo bus factorcaution

All three recent commits came from one contributor, creating a meaningful continuity risk despite the organization-owned repository.

Repo commit activitycaution

Three commits were made in the last 3 months, showing recent activity, though the volume is modest relative to the frequent release cadence.

Workflow auditcaution

All six workflows were analyzed with no untrusted checkouts or script injection, but all 15 action references are unpinned. The high-confidence archived action and trusted-publishing finding add workflow hygiene concerns, while the low-confidence cache findings carry little weight.