jest-resolve

Repo bus factorcaution

One contributor made about 96% of the recent commits, which creates concentration risk, although the organization-owned project and two additional active contributors provide some continuity.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected; this is a minor transparency gap rather than evidence of abandonment.

Workflow auditcaution

All 11 workflows were analyzed, all 48 action references are pinned, and no untrusted checkout or script-injection paths were found. The audit does identify trusted publishing with long-lived registry credentials, which is a supply-chain hygiene concern.