innmind/black-box

Repo bus factorcaution

All 6 commits in the last 3 months came from one contributor, creating a narrow recent contributor base; organization ownership provides some capacity to hand off maintenance.

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting expectations unclear, although this is a transparency gap rather than evidence of abandonment.

Workflow auditcaution

All 11 analyzed action references are unpinned, and three workflows use high-confidence secrets-inherit findings; one workflow also grants top-level write permissions. The audit found no untrusted checkout or script-injection paths, limiting the severity.