determined-development/dd-boost

Repo bus factorcaution

One contributor made all six commits in the last three months, creating a thin maintenance base; organization ownership partly reduces handoff risk but does not remove the concentration.

Repo commit activitycaution

Six commits in the last three months show recent activity, though all activity is concentrated in one active maintainer.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, although the package is small and the workflow audit found no concrete high- or medium-severity issue.

Workflow auditcaution

The only workflow was fully analyzed with no reported audit findings or untrusted sinks, but all three action references are unpinned and the workflow grants top-level write permissions, leaving avoidable supply-chain and token-scope hygiene gaps.