clipboardy

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Repo bus factorcaution

All 3 recent commits came from one contributor, so maintenance depends heavily on a single person despite the project's continued activity.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both referenced actions are unpinned, leaving a modest workflow supply-chain hygiene gap.