luoyue/webman-mcp

Repo bus factorcaution

Only one contributor made all 13 commits in the last 3 months, leaving no demonstrated second maintainer to absorb ownership or ensure continuity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Version stabilitycaution

Version 0.7.0 is not a stable major release, so its API may still change, but it is not marked as a prerelease and recent release activity is strong.

Workflow auditcaution

All 18 analyzed action references are unpinned, which weakens build reproducibility and makes workflow dependencies mutable; the audit found no dangerous triggers, injection sinks, or high-severity findings.