tldts-icann

Repo bus factorcaution

One contributor made all 30 recent commits, concentrating maintenance responsibility and increasing continuity risk even though the project is actively maintained.

Repo package mentioncaution

The repository name does not match tldts-icann and its README does not mention that package, so package ownership is somewhat less transparent; the package's monorepo-style file layout partly explains the mismatch.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations less clear; this is a transparency gap but not evidence of unsafe code.

Workflow auditcaution

All three workflows were analyzed with no dangerous sinks or audit findings, but all nine action references are unpinned, reducing build reproducibility and increasing action-substitution exposure.