jest-axe

Repo bus factorcaution

All 23 recent commits came from one contributor, so maintenance depends heavily on a single person and has elevated continuity risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkout or script-injection findings, but all four action references are unpinned, one workflow grants top-level write access, and a high-confidence low-severity finding reports an install outside a lockfile.