code16/sharp-ohdear-broken-links

Repo bus factorcaution

All two recent commits came from one contributor, so current maintenance is concentrated. Organization backing partly reduces handoff risk, but the observed contributor base remains thin.

Security policycaution

No repository security policy was found. This is a modest transparency gap, though the package does use composer-audit and is not otherwise shown to have a security-handling failure.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Both action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.