geccomedia/weclapp

Repo bus factorcaution

All 3 recent commits came from one contributor, creating a continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no dangerous triggers or findings, but all 15 action references are unpinned, weakening build reproducibility and tamper resistance.