jest-environment-node

Repo bus factorcaution

Although 3 contributors were active in the last 3 months, one contributor made about 96% of commits, leaving maintenance capacity highly concentrated. Organization backing provides some handoff capacity but does not remove the concentration concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, creating some ownership ambiguity. The Jest organization backing and the repository's large monorepo structure partly compensate for that gap.

Workflow auditcaution

All 11 workflows were analyzed, all 48 action references are pinned, and no untrusted checkout or script-injection sinks were found. The audit reports high-confidence informational use of trusted publishing, which is a mild supply-chain hygiene concern, while top-level write permissions occur in only 3 workflows.