21torr/janus

Licensecaution

The manifest declares BSD-3-Clause, while the artifact license file is detected as MIT; although licensing evidence exists, the mismatch needs clarification.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful recent-maintenance gap despite the recent release.

Security policycaution

The repository has no security policy. This is a transparency gap, though the small package and otherwise complete project structure limit its effect to a minor concern.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.