cpsit/migrator

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited recent maintenance activity despite the recent release and pull-request activity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a library intended for project integration.

Version stabilitycaution

Version 0.2.0 is not a stable major release, so its API may still change, but it is not marked as a prerelease and the release includes documented breaking changes.

Workflow auditcaution

All workflows were analyzed, uses are fully pinned, and no untrusted checkout or script-injection path was found. However, the high-confidence template-injection finding in the release workflow is a workflow hygiene concern that warrants review.