inisiatif/model-shared

Repo bus factorcaution

One contributor made 100% of the 2 recent commits. Organizational ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, by one active maintainer. Releases remain frequent, but the recent source activity is thin and concentrated.

Security policycaution

No repository security policy was found. This is a transparency gap, though the available Dependabot and Psalm tooling partly compensates for it.

Workflow auditcaution

All 4 workflows were analyzed, with no untrusted checkout or script-injection findings, but all 10 action references are unpinned. The audit also found one high-confidence bot-conditions issue and a workflow with top-level write permissions; the pull_request_target trigger has no reported untrusted sink.