nopt

Repo bus factorcaution

One contributor made all commits in the last three months. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent development activity despite the current release history.

Workflow auditcaution

All eight workflows were analyzed with no untrusted checkouts or script injections, but all 38 action references are unpinned and high-confidence template-injection findings appear in two workflows. The findings are not paired with pull_request_target or workflow_run triggers, so this is workflow hygiene rather than a severe release risk.