esoftdream/otp

Repo bus factorcaution

All recent repository commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown to reduce concentration risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, so recent implementation activity is limited despite the regular registry release history. This modestly lowers confidence in ongoing development depth.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although Dependabot provides some automated dependency monitoring.

Workflow auditcaution

The single workflow was fully analyzed, has read-only permissions, and contains no detected dangerous findings, but all 3 action references are unpinned. That creates a minor reproducibility and supply-chain hygiene concern.