eloquage/beacon

Dangerous workflowscaution

Six workflows were analyzed with no untrusted checkout or script-injection findings; one pull_request_target workflow remains a limited workflow-risk consideration.

Release historycaution

Only one release exists and the package was first published very recently, so there is no demonstrated release track record or maintenance history yet.

Repo commit activitycaution

There were zero commits and zero active maintainers in the preceding three months, but this is heavily explained by the package being newly published; it still leaves future maintenance unproven.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for consumers.

Token permissionscaution

Three workflows grant top-level write permissions and one lacks top-level permissions, which is broader or less explicit than ideal for CI automation.