launchdarkly-js-sdk-common

Repo bus factorcaution

One contributor made all two commits in the last three months, concentrating recent maintenance capacity; organization backing partly reduces the handoff risk.

Repo commit activitycaution

The repository recorded two commits in the last three months, so activity is present but modest for a core SDK component.

Workflow auditcaution

All five workflows were analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection sinks. However, 10 of 13 action references are unpinned, and the audit found two high-confidence low-severity adhoc-package installations; one workflow also has top-level write permissions.