drizzle-zod

Repo bus factorcaution

All recent commits come from one contributor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only 3 commits were recorded in the last 3 months, all from one active maintainer, which is thin recent source activity despite the package's strong release history.

Repo package mentioncaution

The linked repository name does not match drizzle-zod and its README does not mention the package, so the package-to-repository relationship is less transparent even though it may be a monorepo subpackage.

Version stabilitycaution

Version 0.8.3 is not a prerelease, but the recent prerelease share is 100%, indicating a less settled release line than a mature stable-major package.

Workflow auditcaution

All 32 analyzed action references are unpinned, and high-confidence template-injection and floating-container-image findings affect release workflows; the audit found no untrusted checkout or dangerous trigger pairing, which limits the severity.