capsulescodes/inertia-mailable

Repo bus factorcaution

One contributor made all three commits in the last three months, creating a meaningful concentration risk. Organization backing provides some handoff capacity, but no second recent contributor is shown.

Security policycaution

The repository has no published security policy. This is a transparency gap, though it is not evidence that maintenance has stopped.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection path, but all three action references are unpinned. The low-confidence cache-poisoning finding is hygiene-level only under the audit rules.