georgeff/kernel

Repo bus factorcaution

All 64 recent commits came from one contributor, so maintenance depends heavily on a single person despite the strong activity level.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkout or script-injection findings, but both analyzed action references are unpinned, leaving avoidable CI supply-chain exposure.