jest-mock

Repo bus factorcaution

Three contributors were active in the last three months, but one contributor made about 96% of commits. The organization backing reduces the risk somewhat, but this remains a meaningful concentration concern.

Repo package mentioncaution

The repository name does not match jest-mock and its README does not mention the package. This can be normal for a monorepo, but the absence of both signals creates some uncertainty that the linked repository directly represents this package.

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected, leaving a modest transparency and hygiene gap.

Workflow auditcaution

All 11 workflows were analyzed with no unpinned action references, untrusted checkouts, or script injections. The audit also found a high-confidence trusted-publishing finding and three workflows with top-level write permissions, which warrant caution despite the otherwise strong results.