beelab/test-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently limited maintenance activity.

Repo package mentioncaution

The repository name differs from the package name and its README does not mention the package. The name difference can be normal for a bundle repository, but the missing README mention creates some uncertainty that this repository is the package's intended source.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear; this is a transparency gap but not a severe dependency risk on its own.

Workflow auditcaution

The complete audit found two high-confidence unpinned container-image findings and all six action references are unpinned. No untrusted checkout, script injection, dangerous trigger, or broad top-level write permission was found, so this is a workflow-hygiene caution rather than a critical risk.