enyo/dropzone

Repo bus factorcaution

One contributor made all 14 recent commits, leaving a concentrated maintenance dependency and increasing continuity risk.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is not evidence of unsafe code by itself.

Workflow auditcaution

The sole workflow gives top-level write permissions and all 3 action references are unpinned. The audit found no untrusted checkout, script injection, or other high-confidence findings, so this is a hygiene and reproducibility caution rather than a severe risk.