minipass-fetch

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance activity concentrated; organization ownership helps provide handoff capacity but does not show a second active contributor here.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating sparse recent development, although the package itself released within the assessed period.

Workflow auditcaution

All 8 workflows were analyzed successfully, but all 38 action references are unpinned, 4 workflows grant top-level write permissions, and high-confidence template-injection findings appear in pull-request and release workflows; a medium-confidence bot-condition finding adds further workflow hygiene concern.