drago-ex/project-front

Repo bus factorcaution

One contributor made all five commits in the last three months, leaving maintenance dependent on a single active contributor. Organization backing provides some handoff capacity but does not remove the concentration risk.

Repo commit activitycaution

Five commits were made in the last three months, showing ongoing work, although all were made by one active maintainer.

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting expectations undocumented; this is a transparency gap, not evidence of unsafe code.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or unsafe triggers, but all six action references are unpinned, so their versions can change without a repository change. No top-level permissions block is acceptable on its own.