ilexn/hkid-check-digit

Project backingcaution

The repository is owned by an individual account rather than an organization, so the concentrated maintainer activity has no visible organizational handoff support.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance continuity dependent on a single person.

Repo commit activitycaution

Three commits in the last three months show recent activity, though the volume is modest and comes from only one active maintainer.

Security policycaution

No security policy is present, leaving vulnerability-reporting expectations undocumented; this is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 6 action references are unpinned, weakening build reproducibility and supply-chain protection.