farzai/support

Workflow auditdanger

All 10 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding was reported. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are meaningful hygiene and automation risks rather than a standalone critical failure.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance may be slow despite the recent repository push and release history.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; this is a transparency gap for a maintained library.