cedaro/satispress

Repo bus factorcaution

All six recent commits came from one contributor, creating concentration risk even though the repository is organization-owned.

Repo commit activitycaution

Six commits were made in the last three months, showing ongoing work, but the activity is limited to one active maintainer.

Workflow auditcaution

All four workflows were analyzed without untrusted checkouts or script-injection findings, but all 13 action references are unpinned and the publish workflow has two high-confidence template-injection findings; these are meaningful workflow hygiene concerns, though no dangerous trigger is present.