detective-scss

Repo bus factorcaution

One contributor made all 2 recent commits, leaving maintenance capacity concentrated despite the repository being owned by an organization.

Security policycaution

The repository has no security policy, a transparency gap for reporting vulnerabilities, though its CodeQL and Dependabot coverage provides some compensating security practice.

Workflow auditcaution

All three workflows were analyzed with no dangerous findings, and all use read-only permissions; however, all 7 action references are unpinned, weakening build reproducibility.