tape

Dangerous workflowscaution

Two workflows use pull_request_target, which warrants review because that event can grant elevated repository context, but there are no untrusted checkouts or script-injection findings across the six analyzed workflows.

Repo bus factorcaution

All 4 recent commits came from one contributor, giving a 100% top-contributor share. The repository is organization-owned, which provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

There were 4 commits in the last 3 months, showing recent activity, but only one active maintainer contributed them. This is adequate for a mature project but indicates limited current maintenance capacity.

Repo issue activitycaution

The repository has 31 open issues and 9 open pull requests, but no issues or pull requests were opened or closed in the last month. The backlog is a minor activity concern, though recent release activity provides compensation.