honestlydesign/etch-builders

Repo bus factorcaution

All 86 commits in the last three months came from one contributor, leaving maintenance dependent on a single active person. Organization backing provides some handoff capacity, but no second active contributor is shown.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling security issues. The repository does use Socket scanning, which provides some compensating security practice.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout or script-injection path, but all three action references are unpinned. A low-confidence cache-poisoning finding is hygiene at most under the available evidence.