openapi3-ts

Build provenancecaution

No build attestation, trusted-publisher identity, or staged-publishing record is present, leaving release provenance less transparent than it could be.

Repo bus factorcaution

All three recent commits came from one contributor, creating a meaningful continuity risk if that person becomes unavailable.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

The sole workflow was fully analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths. However, its one action use is unpinned, which is a modest reproducibility and supply-chain hygiene gap.