knplabs/dictionary-bundle

Repo bus factorcaution

All seven recent commits came from one contributor, creating a concentrated short-term bus factor. Organization ownership provides some handoff capacity but does not remove the concentration concern.

Repo commit activitycaution

Seven commits occurred in the last three months, showing current activity, but only one active maintainer contributed them, limiting visible maintenance capacity.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting guidance less transparent for users and maintainers.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings. However, both analyzed action references are unpinned, weakening build reproducibility and action supply-chain controls.