devtools-protocol

Repo bus factorcaution

One bot contributed 42 of 43 recent commits, a concentrated pattern that is a caution; organization ownership and one additional active contributor partly compensate.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less transparent for consumers.

Workflow auditcaution

All six analyzed action references are unpinned, which weakens workflow reproducibility. The sole cache-poisoning finding has low confidence, and there are no untrusted checkouts, script injections, or broad top-level write permissions, so it is not independently severe.