madewithlove/htaccess-api-client

Repo bus factorcaution

All one commit in the last three months came from a single contributor, so observed maintenance is concentrated. The organization-owned project provides some capacity for handoff, but the current activity still leaves a thin operational base.

Repo commit activitycaution

One commit from one active maintainer in the last three months shows some recent maintenance, but the activity level is light. The recent release and organizational backing partly offset the limited cadence.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, but it is not by itself evidence of abandonment or unsafe code.

Workflow auditcaution

Both workflows were analyzed successfully and had no reported audit findings or untrusted checkouts; the pull_request_target trigger is not dangerous on its own. However, all 9 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.