openapi-sampler

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, which is modest activity, but both were made by active contributors and the package has recent releases and merged pull requests. This is a minor maintenance caveat rather than abandonment evidence.

Repo toolingcaution

The repository uses Rollup, Babel, and npm scripts for builds, showing an established build process, but no security-scanning tools were detected. The missing scanning is a transparency gap, not evidence of unfitness by itself.

Security policycaution

No repository security policy was found. This weakens vulnerability-reporting transparency, although the repository does publish release notes and recently documented a security fix.

Token permissionscaution

The release workflow lacks top-level token permissions and relies on job-level permissions. No top-level write permission was detected, but explicit workflow-wide least-privilege declarations would be clearer.