michalper/ordo

Project backingcaution

The repository is owned by an individual account rather than an organization, so the concentrated contributor activity has no visible organizational handoff cushion.

Release historycaution

This is the package's first registry release, published less than one day ago, so there is no demonstrated release track record yet.

Repo bus factorcaution

Two contributors are active, but one accounts for about 79% of recent commits, leaving meaningful concentration risk for a user-owned project.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations unclear.

Workflow auditcaution

All four workflows were analyzed cleanly and all 28 action references are pinned, but two high-confidence findings report floating latest container images in mftf.yml; this is a workflow hygiene and reproducibility concern rather than a standalone severe risk.