nowo-tech/outbound-url-guard-bundle

Workflow auditdanger

All six workflows were analyzed, but all 12 action references are unpinned. More importantly, the high-confidence template-injection finding is in a workflow using workflow_run and also performs an untrusted checkout, creating a serious CI integrity concern; one workflow also grants top-level write permissions.

Release historycaution

This is the first release, published less than one day ago, so there is no release cadence or history demonstrating sustained maintenance. That is a meaningful maturity gap, though it is expected for a new package.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, but the repository and release are less than one day old. This leaves maintenance capacity unproven rather than showing established abandonment.