hectororm/query

Repo bus factorcaution

All 6 recent commits came from one contributor, so maintenance depends heavily on a single individual despite organization ownership.

Workflow auditcaution

The workflow audit found no dangerous sinks or audit findings, and the pull_request_target trigger is harmless here because no untrusted checkout or script injection was detected. However, the only action reference is unpinned, which weakens build reproducibility.