libmime

Repo bus factorcaution

Two contributors were active, but one made about 85% of recent commits. The organization-owned repository provides some handoff capacity, so this is a moderate concentration concern rather than a severe risk.

Repo toolingcaution

The project uses a build tool, but no security-scanning tools were detected. This is a modest transparency gap, not evidence of unsafe code by itself.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear and creating a small transparency gap.

Type declarationscaution

No type declarations are included, which is a minor integration limitation for TypeScript consumers, but it does not indicate maintenance or abandonment risk.

Workflow auditcaution

Both workflows were analyzed without failed files or dangerous-trigger sinks, but all 5 action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene concerns, not severe risks on their own.