jbtronics/settings-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This conflicts with the recent release and merged pull requests, but still indicates a current pause in direct commit activity.

Security policycaution

The repository has no SECURITY.md or other declared security policy. This is a transparency gap for a maintained library, though it does not by itself indicate abandonment.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings, no untrusted checkouts, and no injection sinks. However, all 8 referenced actions are unpinned, leaving workflow dependencies exposed to upstream changes.