brick/postcode

Repo bus factorcaution

All recent commits came from 1 contributor, creating a narrow operational bus factor. Organization ownership partly compensates by allowing maintenance to be handed off, but no second active contributor is shown.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, showing limited recent development activity despite the recent release history. This is a maintenance concern rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 8 action references are unpinned. Missing top-level permissions is acceptable on its own, while unpinned actions leave CI exposed to upstream reference changes.