nodemon

Repo bus factorcaution

One contributor made all 11 commits in the last three months, creating a meaningful continuity risk. The repository is active, which partly offsets but does not remove the concentration concern.

Repo toolingcaution

The project uses build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance-process gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All five workflows were analyzed with no audit findings or untrusted checkout/script-injection paths, and three use job-level permissions. However, all eight analyzed action references are unpinned, weakening build reproducibility and supply-chain hygiene.