detective-cjs

Repo bus factorcaution

One contributor made all recent commits, creating concentration risk; organization ownership provides some ability to hand maintenance to others but does not show a second active contributor.

Repo commit activitycaution

Only two commits were made in the last three months, indicating limited recent activity, although the release history shows the project is still being updated.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent.

Workflow auditcaution

All three workflows were analyzed with no findings, all use read-only permissions, and no untrusted trigger sinks were found. However, all seven action references are unpinned, weakening build reproducibility and action supply-chain hygiene.