javaabu/query-builder

Repo bus factorcaution

All three recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some ability to hand maintenance off.

Security policycaution

The repository has no security policy file, leaving vulnerability-reporting and response expectations less transparent than they could be.

Workflow auditcaution

The sole workflow has one script-injection finding and all three action references are unpinned; it has no top-level write permissions and no dangerous trigger, so this is workflow hygiene risk rather than a severe standalone concern.