blockshiftnetwork/chat-markdown-converter

Workflow auditdanger

The audit analyzed all four workflows and found no untrusted checkout or script-injection sink, but all nine action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; three workflows also grant top-level write access.

Release historycaution

Four releases over roughly 228 days, with a median interval of about 48 days, shows an emerging but not yet mature release history.

Repo bus factorcaution

One contributor made all two recent commits, concentrating observed maintenance in a single person; organization backing partly compensates through potential handoff capacity.

Repo commit activitycaution

Only two commits were made in the last three months, indicating modest recent maintenance activity for a young package.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.