antistatique/swisstopo

Repo bus factorcaution

One contributor made all 14 commits in the last three months, creating concentration risk. The organization-owned repository provides some ability to hand maintenance off, so this is not by itself a severe health concern.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, although the configured security scanning tools partly compensate for it.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings, no untrusted checkouts, and no script-injection paths. However, all 14 analyzed action references are unpinned, which weakens build reproducibility and leaves action updates less controlled.