electron-to-chromium

Repo bus factorcaution

All 115 recent commits came from one contributor, so maintenance knowledge and release capacity are highly concentrated.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented; this is a modest transparency gap for an otherwise active project.

Workflow auditcaution

Both workflows were analyzed, but all five action references are unpinned and the publish workflow installs a package outside the lockfile. The high-severity cache finding is low confidence, so it is hygiene rather than a severe risk.