superstatic

Repo bus factorcaution

One contributor made 16 of 17 recent commits, creating a concentrated maintenance risk. The second active contributor and organization ownership provide some handoff capacity, so this is a caution rather than a severe risk.

Workflow auditcaution

All workflows were analyzed successfully, use read-only permissions, and pin all six action references. Two high-confidence low-severity adhoc-package findings indicate test workflows install packages outside a lockfile, a minor reproducibility concern.