jardissupport/classversion

Repo bus factorcaution

All four recent commits came from one contributor, creating a real continuity risk. Organization ownership provides some capacity to hand off maintenance, but no second active contributor is shown.

Repo commit activitycaution

Four commits in the last three months show ongoing work, but the activity level is modest for a young package.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package intended to run in applications.

Workflow auditcaution

All seven analyzed action references are unpinned, weakening build reproducibility and exposing workflows to moving action code. One workflow also grants top-level write access, though the audit found no untrusted checkout, injection, or high-confidence dangerous finding.