node-abi

Lifecycle scriptscaution

A prepare script runs during installation, which adds some install-time behavior and warrants awareness, but this signal alone does not indicate unsafe or excessive lifecycle activity.

Repo bus factorcaution

One contributor made all 2 recent commits, leaving a narrow recent bus factor; organization ownership provides some capacity to hand maintenance off.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, so direct commit activity is modest even though the release cadence and merged pull requests show continued maintenance.

Security policycaution

The repository has no security policy, which is a transparency gap for reporting vulnerabilities, but the other provided security signals offer partial compensation.

Workflow auditcaution

All 5 workflows were analyzed, all 14 action references are pinned, and all workflows use read-only permissions. The one high-confidence low-severity adhoc-packages finding is a minor workflow hygiene concern.