elm-watch

Repo bus factorcaution

All four recent commits came from one contributor, leaving maintenance highly concentrated and increasing continuity risk if that contributor becomes unavailable.

Repo toolingcaution

The project uses TypeScript, Vitest, npm scripts, and esbuild, but no security-scanning tool was detected. The missing scanner is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four workflows were analyzed with no dangerous audit findings or untrusted checkouts, but all 17 action references are unpinned. The absence of top-level permissions is not itself a concern.