js-beautify

Repo bus factorcaution

All 15 recent commits came from one contributor, concentrating current maintenance capacity and increasing continuity risk. Organization ownership partly compensates because responsibility can be handed off.

Repo commit activitycaution

There were 15 commits in the last three months, showing recent maintenance rather than a vanished project, but the pace is modest for a widely used package.

Repo issue activitycaution

The repository received 19 new pull requests in the last month, although none were merged and no issues were closed, indicating activity with limited recent throughput.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented. Existing CodeQL and Dependabot coverage partly compensates for this documentation gap.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkout or script-injection findings, and permissions are not broadly write-enabled. However, all 15 action references are unpinned and three high-confidence archived-action findings remain, creating build reproducibility and maintenance concerns.