innmind/url-template

Repo bus factorcaution

One contributor made 100% of the four recent commits. Organization backing partly reduces handoff risk, but the observed contributor base remains concentrated.

Repo commit activitycaution

The repository recorded four commits in the last three months, showing current activity. However, all four were made by one active maintainer, limiting demonstrated maintenance breadth.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.

Workflow auditcaution

All three workflows were analyzed, with no untrusted checkouts or script injection, but all six action references are unpinned and two high-confidence medium-severity findings show secrets being inherited by reusable workflows. These are meaningful workflow-hygiene and credential-scope concerns.