jolicode/asynit

Repo bus factorcaution

One contributor made all 12 recent commits, concentrating maintenance responsibility and increasing continuity risk; organization backing provides some ability to hand work off.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest gap in ongoing dependency and code hygiene.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent.

Version stabilitycaution

Version 0.18.0 is not a prerelease, but the package remains below a stable major version, so compatibility expectations are somewhat weaker.

Workflow auditcaution

The single workflow was fully analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.