copy-anything

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated maintainer activity is not offset by visible organizational backing.

Repo bus factorcaution

One contributor made all 24 commits in the last three months, creating a genuine continuity risk if that contributor becomes unavailable.

Repo toolingcaution

The project uses TypeScript, Vitest, and npm scripts for building and testing. No security-scanning tooling was detected, which is a modest transparency gap for maintenance hygiene.

Security policycaution

The repository has no security policy, so users are given no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. All three action references are unpinned, which weakens reproducibility and action-integrity hygiene.