johngrogg/ics-parser

Project backingcaution

The source repository is user-owned rather than organization-owned, so the concentrated recent activity does not have visible organizational backing to compensate for the bus-factor concern.

Repo bus factorcaution

All four recent commits came from one contributor, creating a meaningful single-maintainer continuity risk; the repository is user-owned, so no organizational handoff evidence offsets it.

Repo commit activitycaution

Four commits were made in the last 3 months, showing current activity, but only one active maintainer contributed them, limiting evidence of durable maintenance capacity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

All five action references are unpinned, and the audit found a high-confidence bot-conditions issue in a pull_request_target workflow; one workflow also grants top-level write access, adding avoidable automation risk.