monadial/nexus-monorepo

Workflow auditdanger

All workflows were analyzed, but all 48 action references are unpinned; high-confidence template injection with an untrusted checkout path is a serious workflow hygiene concern, while high-confidence ad hoc package installs add smaller risk. The workflow audit also reports a workflow_run trigger and an untrusted checkout, although the reported paths do not establish that every issue occurs together.

Dependency profilecaution

The package declares 26 runtime dependencies, including database, telemetry, HTTP, and messaging components; that broad dependency surface increases maintenance and compatibility exposure.

Release historycaution

This is the only release, published 64 days ago, so there is not yet enough release history to demonstrate sustained maintenance.

Repo bus factorcaution

All 199 recent commits came from one contributor, creating a significant continuity and handoff risk despite the repository being organization-owned.

Repo issue activitycaution

The repository opened 12 pull requests in the last month and has 20 open pull requests, showing active development, though none were merged in that period.