keycloakify

Repo bus factorcaution

One contributor made 83% of the last three months' commits, creating concentration risk, although two additional contributors remained active.

Repo toolingcaution

The project uses established build and test tooling, but no security scanning tools were detected, leaving a modest transparency gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The sole workflow grants top-level write permissions, leaves all 14 action references unpinned, and high-confidence auditing found an ad hoc package install. No untrusted checkout or script-injection path was detected, limiting the severity.