chevere/workflow

Repo bus factorcaution

All three recent commits came from one contributor. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only three commits were made in the last three months, which is modest activity, though the frequent registry releases show the project is not abandoned.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear despite its security scanning tooling.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or dangerous triggers, but all seven action references are unpinned, weakening build reproducibility. The absence of a top-level permissions block is acceptable on its own.