madewithlove/htaccess-cli

Dangerous workflowscaution

One workflow uses pull_request_target, which warrants care because that trigger can expose privileged workflow context, but no untrusted checkout or script-injection patterns were detected.

Repo bus factorcaution

All recent commit activity comes from one contributor, creating a concentration risk; the organization-owned repository provides some capacity to hand maintenance off, but no second recent contributor is shown.

Repo commit activitycaution

There was one commit by one active maintainer in the last three months, so maintenance is currently present but sparse.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented and reducing transparency for security issues.

Token permissionscaution

None of the four analyzed workflows declares top-level token permissions. No workflow requests explicit top-level write access, but the lack of restrictive declarations leaves permissions less explicit than they should be.