main_2.12

Repo package mentioncaution

The repository name does not match this artifact and its README does not mention the package. This may be normal for an sbt monorepo, but the lack of an explicit package reference warrants caution about source-to-artifact traceability.

Security policycaution

No repository security policy was found, leaving disclosure and response guidance less transparent despite the project's otherwise active maintenance.

Workflow auditcaution

All eight workflows were analyzed with no audit findings or untrusted checkout/script-injection paths, and five use read-only permissions. However, 25 of 26 action references are unpinned and two workflows have top-level write permissions, creating a moderate reproducibility and token-scope hygiene concern.