mimmi20/ua-device-type

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated recent activity has no visible organizational handoff buffer.

Repo bus factorcaution

One contributor made all two commits in the last three months, leaving maintenance dependent on a single active person.

Repo commit activitycaution

There were two commits in the last three months, so activity is present but modest and concentrated in a small maintenance window.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting and handling vulnerabilities, though active security scanning partly compensates.

Workflow auditcaution

All 12 analyzed action references are unpinned and four workflows grant top-level write permissions, creating workflow-hygiene concerns. However, all workflows were analyzed, no high-confidence findings were reported, and no untrusted checkout or script-injection paths were found.