artryazanov/yt-cover-gen

Repo bus factorcaution

One contributor made all 21 commits in the last 3 months, giving the project a concentrated bus factor and increasing continuity risk if that maintainer becomes unavailable.

Security policycaution

The repository has no security policy file. This is a transparency gap for a package that integrates external AI services, although it does not by itself indicate abandonment.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 7 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.