arty/probe-bundle

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months; the recent repository push and active release history compensate partly, but the measured pause still raises maintenance concern.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and contact information undocumented.

Workflow auditcaution

All four action references are unpinned, and the audit reports high-confidence bot-condition and template-injection hygiene issues; however, no untrusted checkout, script-injection, pull_request_target, or workflow_run sink was found, so this is caution rather than a severe risk.