is-subdir

Repo bus factorcaution

All two recent commits came from one contributor, so maintenance knowledge is concentrated and abandonment risk is higher if that contributor stops working.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing recent activity but only at a modest level.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention is-subdir, so the repository's ownership of this package is less transparent than expected.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, although it does not by itself indicate unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkout and script-injection issues. Two of three action references are unpinned, a minor reproducibility and workflow-hygiene concern.