@argonprotocol/mainchain

Repo bus factorcaution

Commit activity is highly concentrated: one contributor made about 98% of 115 recent commits, leaving limited demonstrated redundancy even though a second contributor remains active.

Security policycaution

No repository security policy is present, leaving disclosure guidance unclear; the project's separate security scanning tools partly compensate for this documentation gap.

Workflow auditcaution

All 13 workflows were analyzed, but one workflow combines a workflow_run trigger with an untrusted checkout, and the audit also found high-confidence unpinned images and workflow-condition issues. Forty-two of 68 action references are unpinned; low-confidence cache and environment findings are hygiene concerns rather than standalone severe risks.