gregorj/correct-horse

Repo bus factorcaution

All nine recent commits came from one contributor, leaving maintenance dependent on a single person despite the repository's current activity.

Security policycaution

The repository has no security policy, which is a modest transparency gap for reporting vulnerabilities.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or excessive permissions, but both analyzed actions are unpinned, reducing reproducibility and update integrity.