avvertix/dmarc-report-parser

Maintainerscaution

Only one registry account has publish access. This is a modest publishing-resilience concern, though repository activity shows that the account is currently maintaining the project.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor concentration and one-account publishing model are meaningful resilience limitations.

Repo bus factorcaution

All seven recent commits came from one contributor, so maintenance depends heavily on a single person despite the project's recent activity.

Workflow auditcaution

Both workflows were analyzed without failed files or high-confidence findings, and no untrusted checkout or injection sink was found. All five action references are unpinned and one workflow grants top-level write access, which weakens reproducibility and least-privilege hygiene.