hershel-theodore-layton/expect

Repo bus factorcaution

All eight recent commits came from one contributor, so maintenance depends entirely on a single person.

Security policycaution

The repository has no security policy, leaving the reporting and response process undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts or script injection, but both uses of container images are unpinned. The auditor marked these findings low confidence, so they are a hygiene caution rather than a severe risk.