@dependents/detective-less

Repo bus factorcaution

All two recent commits came from one contributor, creating a concentrated maintenance path; organization backing provides some ability to hand work off, but no second recent contributor is shown.

Repo commit activitycaution

Two commits were made in the last three months, so activity has not stopped, but the low volume indicates limited recent maintenance capacity.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting guidance unclear, though CodeQL and Dependabot provide partial security-process evidence.

Workflow auditcaution

All three workflows were analyzed successfully, use read-only permissions, and contain no untrusted checkout or script-injection findings. However, all seven action references are unpinned, which weakens build reproducibility and supply-chain hygiene.