elavora/api-framework

Repo bus factorcaution

All 22 recent commits came from one contributor. Organization ownership provides some handoff capacity, but the complete concentration still raises continuity risk.

Version stabilitycaution

This is a release candidate rather than a final stable release, so API or behavior changes remain more likely despite the low recent prerelease share.

Workflow auditcaution

All five workflows were analyzed and all references are pinned, with no untrusted checkout or injection findings. However, three workflows have top-level write permissions and two high-confidence medium-severity secrets-inherit findings, creating a workflow hygiene concern.