alexskrypnyk/snapshot

Dangerous workflowscaution

One of four workflows uses pull_request_target, which warrants review because that trigger can expose privileged workflow behavior, but no untrusted checkout or script-injection patterns were detected.

Maintainerscaution

Only one account has registry publish access. This is a caution for publishing continuity, though recent repository activity shows that the same maintainer is actively maintaining the project.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no organizational maintenance-backing signal to offset the concentrated maintainer base.

Repo bus factorcaution

One contributor made all 23 commits in the last 3 months, creating a meaningful bus-factor and continuity risk; the repository is user-owned rather than organization-owned, so there is no project-backing compensation.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 0 watchers, indicating limited external adoption; popularity is supporting evidence rather than a decisive health measure.