expect-type

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry publisher and concentrated ownership provide less maintenance redundancy.

Repo bus factorcaution

Two contributors were active in the last three months, although one contributor made 75% of commits; this is a modest concentration risk rather than a severe abandonment signal.

Repo toolingcaution

The project uses TypeScript and npm scripts for builds, but no security scanning tools were detected, leaving a modest visibility gap.

Workflow auditcaution

All five workflows were analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths. However, seven of nine action references are unpinned, and high-confidence adhoc package installs plus an informational trusted-publishing finding leave workflow hygiene concerns.