domainflow/core

Repo bus factorcaution

All 17 recent commits came from one contributor, creating a meaningful continuity risk. Organization backing provides some handoff capacity, but no second active contributor is shown.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

This is a non-prerelease release, although the package remains below major version 1 and may still have API churn.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts or script injection, but all 25 action references are unpinned, weakening build reproducibility and supply-chain control.