node-source-walk

Repo bus factorcaution

All two commits in the last three months came from one contributor, so current maintenance is concentrated. Organization ownership provides some ability to hand maintenance off, but no second recent contributor is shown.

Security policycaution

No repository security policy was found. This is a transparency and response-process gap, but it is not evidence that the package is unsafe by itself.

Workflow auditcaution

All three workflows were analyzed, all use read-only permissions, and no high- or medium-confidence audit findings or untrusted execution sinks were reported. However, all seven analyzed action references are unpinned, leaving workflow behavior exposed to upstream action changes.