chamber-orchestra/form-bundle

Repo bus factorcaution

All 4 recent commits came from one contributor. Organization ownership provides some potential handoff capacity, but no second active contributor is shown to compensate for the concentration.

Repo commit activitycaution

There were 4 commits in the last 3 months, so activity is present, but it is modest for a package with frequent releases and does not establish broad maintenance capacity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented for a framework integration package.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings, but all 4 action references are unpinned and one workflow grants top-level write permissions, creating avoidable maintenance and supply-chain hygiene risk.