ecoapm/libyear

Repo bus factorcaution

All three recent commits came from one contributor, concentrating short-term maintenance capacity; organization backing provides some ability to hand work off, but no second recent contributor is shown.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings or dangerous untrusted triggers. However, all six action references are unpinned, which weakens reproducibility and update control.