mathiasgrimm/glimpse-cli

Dangerous workflowscaution

One of four workflows uses pull_request_target, creating an elevated workflow-risk surface even though no untrusted checkouts or script-injection patterns were detected.

Maintainerscaution

Only one registry publishing maintainer is listed, which is a modest continuity concern for this user-owned project and is partly offset by two active repository contributors.

Release historycaution

The package is only 66 days old but has 27 releases, with the latest published recently and a median interval of about 2 hours 25 minutes; this shows active iteration but limited long-term history.

Repo bus factorcaution

Two contributors are active, with the top contributor responsible for about 55% of commits; this is somewhat concentrated but not dominated by one contributor.

Repo toolingcaution

The repository uses Make, Composer, and Box for builds, but no security scanning tools were detected, leaving a security-process gap.