i18next-http-middleware

Build provenancecaution

The release has no build attestation, trusted publisher identity, or staged publishing. This weakens publication transparency and makes artifact origin harder to verify.

Repo bus factorcaution

All three recent commits came from one contributor, creating a concentrated recent activity profile. Organization backing partially mitigates handoff risk but does not eliminate the continuity concern.

Repo commit activitycaution

Three commits were made in the last three months, showing recent activity, but the volume is modest and warrants some monitoring for slowing maintenance.

Repo toolingcaution

The repository uses TypeScript and Babel build tooling, but no security scanning tools were detected. The build setup is established, while the missing scanning is a hygiene gap.

Token permissionscaution

Neither of the two workflows declares top-level token permissions, and neither is reported as read-only. Although no write permissions are explicitly requested, this is weaker workflow hardening than a least-privilege declaration.