gcworld/routing

Repo bus factorcaution

All 3 recent commits came from one contributor, creating a maintenance concentration risk. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for consumers.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no untrusted-trigger or injection findings. However, all 3 referenced actions are unpinned, which weakens build reproducibility and action supply-chain protection.