jest-junit

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, leaving publication provenance less transparent even though other repository evidence is healthy.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent pushes and pull-request activity provide some compensating evidence, but the lack of recent commits is a real maintenance concern.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected. This is a transparency and preventive-maintenance gap rather than evidence that the package is unsafe.

Security policycaution

No repository security policy was found, reducing clarity about vulnerability reporting and maintenance response.

Token permissionscaution

The repository workflow declares no top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide stronger assurance.