geist

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Recent release activity and a recent push provide some compensation, but the lack of observed development lowers maintenance confidence.

Workflow auditcaution

Both workflows were analyzed successfully, with no untrusted checkout or script-injection trigger pairing; however, all 14 action references are unpinned, one workflow grants top-level write access, and high-confidence template-injection findings remain. These are workflow hygiene concerns rather than a severe release risk because the audited dangerous triggers were absent.