acdh-oeaw/arche-ingest

Repo bus factorcaution

One contributor made all eight commits in the last three months, creating a genuine continuity risk. Organization backing partly compensates because maintenance can potentially be handed off.

Security policycaution

The repository has no security policy, reducing transparency about how maintainers handle vulnerability reports.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all four referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.