@ucast/js

Repo bus factorcaution

All 3 recent commits came from one contributor, leaving maintenance dependent on a single active person.

Repo commit activitycaution

Only 3 commits were made in the last 3 months, showing some recent activity but a modest maintenance pace.

Repo toolingcaution

The project uses TypeScript build tooling, but no repository security-scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 4 action references are unpinned, which weakens build reproducibility.