jsdoc-type-pratt-parser

Repo bus factorcaution

Three contributors were active recently, but one human contributor made about 64% of commits and the release bot made about 32%, leaving maintenance somewhat concentrated; organization backing provides some compensation.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security-scanning tool was detected; this is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear.

Token permissionscaution

None of the four workflows declares top-level permissions, and only one uses job-level permissions; although no top-level write permissions were found, explicitly minimizing permissions would provide stronger workflow hygiene.