jest-fetch-mock

Repo bus factorcaution

One contributor made 29 of 30 recent commits, leaving maintenance highly concentrated despite a second active contributor.

Security policycaution

No repository security policy is present. This is a modest transparency gap for reporting vulnerabilities, but it does not outweigh the active maintenance evidence.

Workflow auditcaution

All 8 action references are unpinned and one workflow grants top-level write access; the only audit finding is low-confidence cache-poisoning, which is hygiene rather than a severe risk on its own.