interaction-design-foundation/coding-standard

Repo bus factorcaution

All 9 recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

All 16 analyzed action references are pinned, and no untrusted checkouts or script injections were found. The audit only identified low-confidence cache-poisoning patterns and one workflow with broad write permissions, so this is a minor hygiene concern rather than a severe workflow risk.