jest-runner

Repo bus factorcaution

Three contributors were active recently, but one contributor made about 96% of the 73 commits; the organization backing provides some handoff capacity, but concentration remains a maintenance caution.

Repo package mentioncaution

The repository name does not match jest-runner and its README does not mention the package, so the link is less transparent even though a monorepo can legitimately contain subpackages.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

All 11 workflows were analyzed, all 48 action references are pinned, and no untrusted checkout or script-injection sinks were found. The high-confidence use-trusted-publishing finding and three workflows with top-level write permissions warrant caution, although no high- or medium-severity findings were reported.