jardissupport/dotenv

Repo bus factorcaution

One contributor made all 18 recent commits, creating a real continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All seven action references are unpinned, and the audit found a high-confidence template-injection issue in the release workflow. No pull_request_target or workflow_run trigger was found, so this is a workflow-hygiene concern rather than a standalone severe risk.