dot-prop

Repo bus factorcaution

All two recent commits came from one contributor, so maintenance depends heavily on a single person. The long release history partly offsets this, but the concentration remains a real resilience concern.

Workflow auditcaution

Both analyzed action references are unpinned, which weakens reproducibility. However, the audit found no untrusted checkouts, script injection, dangerous triggers, or other findings, so this is a hygiene concern rather than a severe risk.