fnx-software/filament-astrotomic

Repo bus factorcaution

One contributor made 100% of the recent commits. Organizational ownership partly compensates by allowing maintenance handoff, but no second active contributor is demonstrated.

Repo commit activitycaution

Five commits in the last 3 months show ongoing work, but all activity came from one maintainer, limiting demonstrated maintenance depth.

Workflow auditcaution

All 7 analyzed action references are unpinned, and all three workflows grant top-level write permissions. The audit also found a high-confidence bot-conditions issue in a pull_request_target workflow; although no untrusted checkout or script injection was found, these controls weaken automation hygiene.