async-aws/sso

Repo bus factorcaution

One contributor made all commits in the last 3 months, creating a concentrated recent maintenance path; organizational backing reduces handoff risk but does not remove the concentration.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, showing limited recent activity, although the release history indicates the package is still being delivered.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

No repository security policy was found, reducing the project's documented process for receiving and handling vulnerability reports.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 4 action references are unpinned, which is a workflow supply-chain hygiene concern.