68publishers/image-storage

Repo bus factorcaution

One contributor made 100% of the recent commits. Organization backing provides some handoff capacity, but current change activity remains concentrated.

Repo commit activitycaution

There was one commit in the last 3 months, so maintenance is still visible but limited. The active release history partly compensates, but repository activity is thin.

Security policycaution

No security policy was found in the repository. Dependabot helps with dependency monitoring, but it does not replace clear vulnerability-reporting guidance.

Workflow auditcaution

All three workflows were analyzed with no audit findings or dangerous untrusted triggers, and none grants top-level write access. However, all 8 action references are unpinned, leaving avoidable supply-chain drift risk.