async-aws/iam

Repo bus factorcaution

All 2 recent commits came from one contributor. Organization backing provides some handoff capacity, but no second recent contributor is shown to reduce concentration risk.

Repo commit activitycaution

The repository recorded 2 commits in the last 3 months, showing some recent maintenance, though the volume is modest.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, not evidence of unsafe code.

Workflow auditcaution

Both workflows were fully analyzed with no detected sinks or audit findings, but all 4 action references are unpinned. That leaves avoidable workflow supply-chain exposure despite the otherwise clean audit.