globby

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated recent contribution profile is not offset by visible organizational handoff capacity.

Repo bus factorcaution

One contributor made 8 of 9 recent commits, creating concentration risk, although a second contributor remained active during the same period.

Workflow auditcaution

All workflows were analyzed with no audit findings, no untrusted checkouts, and no script injections. However, both action references are unpinned, which is a modest reproducibility and maintenance hygiene gap.