laposta/laposta-signup-embed

Repo bus factorcaution

All recent commits come from one contributor, creating concentration risk. Organization ownership provides some ability to hand off maintenance, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, by one active maintainer. The recent release and broader release cadence help, but this is a genuine sign of limited current maintenance activity.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence of unsafe code by itself.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, script injection, or reported audit findings. However, both analyzed action references are unpinned, leaving automated builds exposed to upstream action changes.