jest

Repo bus factorcaution

One contributor made about 96% of the 73 recent commits, leaving maintenance highly concentrated. The organization-owned project provides some handoff capacity, but the concentration remains a meaningful resilience concern.

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected. The repository's separate SECURITY.md provides some compensating transparency, so this is a limited concern.

Workflow auditcaution

All 11 workflows were analyzed successfully, all 48 action references are pinned, and no untrusted checkout or script-injection sinks were found. The high-confidence trusted-publishing finding indicates long-lived registry credentials instead of short-lived credentials, which is a supply-chain hygiene concern.