zod-validation-error

Lifecycle scriptscaution

The package defines a prepare lifecycle script. This is a mild installation-surface concern, although the available evidence does not show that it performs unsafe work.

Repo bus factorcaution

One contributor made all commits in the last three months. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

The repository had four commits in the last three months, showing recent activity, but all were made by one active maintainer. The activity is current but narrow.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though it does not by itself indicate abandonment.

Workflow auditcaution

Both workflows were fully analyzed with no high-confidence audit findings or untrusted checkout or script-injection paths. However, all 15 action references are unpinned, and one release workflow grants top-level write permission, creating workflow hygiene and token-scope concerns.