ts-jest

Lifecycle scriptscaution

The package uses a prepare install lifecycle script. This adds installation complexity, but the broader build and release evidence does not indicate that it is unsupported or unusually risky.

Security policycaution

No repository security policy was found. That is a transparency gap for vulnerability reporting, although active maintenance and security scanning partly compensate for it.

Workflow auditcaution

All 8 workflows were analyzed with no unpinned actions, but the release workflow has two high-confidence template-injection findings alongside a workflow_run trigger and an untrusted checkout. This creates a real workflow-hygiene concern, though it is not by itself evidence that the package is unsafe.