bobv/latex-bundle

Repo bus factorcaution

All 48 recent commits came from one contributor, so maintenance depends entirely on a single individual despite the strong recent activity.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

The only workflow was fully analyzed with no high-confidence audit findings or untrusted checkout paths, but all 3 action references are unpinned, weakening build reproducibility and update control.