@xhmikosr/decompress-tarbz2

Repo bus factorcaution

All recent repository commits came from one contributor, leaving maintenance dependent on a single person; the repository is user-owned, so no organizational handoff is evidenced.

Repo commit activitycaution

There was one commit in the last 3 months, showing recent activity but a limited maintenance pace for the observed period.

Security policycaution

The repository has no security policy, which is a transparency gap, although CodeQL scanning provides some compensating security practice.

Workflow auditcaution

All 8 analyzed action references are unpinned, weakening CI supply-chain reproducibility. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, which keeps this a hygiene concern rather than a severe workflow risk.