jeffersongoncalves/screentest-cli

Project backingcaution

The repository is owned by a user rather than an organization, so the small contributor base and concentrated commit share are not offset by visible organizational maintenance capacity.

Repo bus factorcaution

Two contributors were active in three months, but the top contributor made about 67% of commits, leaving meaningful concentration risk for a user-owned project.

Security policycaution

No repository security policy was found, which is a transparency gap for reporting vulnerabilities, though it is less significant for this small CLI than for a security-sensitive library.

Workflow auditcaution

All four workflows were analyzed and all 11 action references are pinned, but three workflows grant top-level write permissions and a high-confidence bot-conditions finding reports spoofable actor context in the Dependabot auto-merge workflow.