node-rsa

Workflow auditdanger

Both workflows were analyzed successfully, but all four action references are unpinned. The release workflow has two high-confidence template-injection findings; its low-confidence cache-poisoning finding is hygiene-level rather than decisive.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer represents a genuinely thin ownership base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance and abandonment concern that is partly offset by the recent release and push timestamps.

Repo toolingcaution

The repository uses a defined TypeScript build and test toolchain, but no security-scanning tool was detected.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.