quickjs-emscripten-core

Project backingcaution

The repository is owned by an individual rather than an organization, so the small observed maintainer and contributor base provides less maintenance redundancy.

Release historycaution

The package has 26 releases and a release as recently as February 2026, but only one release in the last 12 months indicates a slower current cadence.

Repo toolingcaution

The repository uses established build tools, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The workflow audit found no dangerous triggers, untrusted checkouts, or audit findings, but all five action references are unpinned, weakening build reproducibility and supply-chain hygiene.