acdh-oeaw/arche-diss-cache

Repo bus factorcaution

All 12 recent commits came from one contributor, creating a meaningful single-person continuity risk despite the repository being organization-owned.

Security policycaution

The repository has no security policy, which reduces transparency about vulnerability reporting and handling, although active releases and recent commits provide compensating maintenance evidence.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, leaving avoidable dependency-integrity and reproducibility risk.