anzusystems/auth-bundle

Repo bus factorcaution

All 14 recent commits came from one contributor, creating a real continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.

Security policycaution

No SECURITY.md or equivalent security policy was found, leaving vulnerability-reporting expectations less transparent for a security-sensitive authentication bundle.

Token permissionscaution

The workflow has no top-level GitHub Actions permissions declaration. It does not request top-level write access, but the missing explicit restriction is a workflow-hygiene gap.