myerscode/utilities-numbers

Repo bus factorcaution

All 16 recent commits came from one contributor, leaving maintenance highly concentrated; organization ownership provides some handoff capacity but no second active contributor is shown.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations unspecified.

Workflow auditcaution

All four workflows were analyzed, but all 12 action references are unpinned, one workflow grants top-level write access, and high-confidence template-injection findings occur in the release workflow. The findings are hygiene concerns because no untrusted trigger or checkout sink was detected, but they still weaken release-workflow assurance.