p-retry

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Repo bus factorcaution

All 2 recent commits came from one contributor, leaving maintenance dependent on a single active person and creating a genuine continuity concern.

Repo toolingcaution

The repository reports no build tooling or security scanning tools. This is a modest transparency and assurance gap, though the package is small and its source and tests are directly visible.

Token permissionscaution

The only workflow lacks a top-level permissions declaration. No write permissions were observed, but explicitly declaring least-privilege permissions would provide stronger assurance.