dns2

Maintainerscaution

Only one registry account has publish access. This is a modest continuity concern, though repository activity and provenance provide some compensation.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the concentrated recent maintenance has no demonstrated organizational handoff buffer.

Repo bus factorcaution

All six recent commits came from one contributor, creating a meaningful continuity risk for a user-owned project without organizational backing.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tools were detected. The missing scanner is a hygiene gap rather than evidence of abandonment.

Workflow auditcaution

All 14 analyzed action references are unpinned, and a high-confidence audit found a workflow installing a package outside a lockfile. The audit was complete and found no dangerous trigger or untrusted checkout.