mpyw/null-auth

Project backingcaution

The package and repository are owned by the same individual, so the single-person ownership reflected elsewhere is not misleadingly presented as organizational backing.

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single person without evidence of a broader active contributor base.

Repo commit activitycaution

There was one commit by one active maintainer in the last three months, showing recent attention but limited activity volume.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a modest transparency gap for a library.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which weakens build reproducibility.