jbzoo/assets

Dependency profilecaution

Five runtime dependencies, including several related JBZoo packages, create a meaningful dependency surface but remain understandable for this library.

Repo bus factorcaution

All two recent commits came from one contributor. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Two commits in the last three months show recent activity, but the pace is light for an actively evolving library.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The workflow was fully analyzed with no detected injection or high-severity findings and uses read-only permissions, but all 9 action references are unpinned, weakening build reproducibility and update safety.