async-aws/sso-oidc

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is thin recent activity despite the broader release history.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers or audit findings, and neither uses broad top-level write permissions. However, all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.