itk-dev/openid-connect-bundle

Repo bus factorcaution

All 56 recent commits came from one contributor, creating concentration risk; the organization-owned project provides some continuity but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 14 analyzed action references are unpinned, and two high-confidence template-injection findings were reported; the workflows have no untrusted checkout or script-injection findings, so this is workflow hygiene risk rather than a severe dependency verdict.