oat-sa/extension-tao-funcacl

Repo bus factorcaution

Two contributors were active recently, but one produced about 88% of the commits. The second contributor provides some backup, while concentration still creates a modest continuity risk.

Security policycaution

The repository has no security policy. That weakens the documented process for reporting and handling vulnerabilities, although it does not by itself indicate abandonment.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkout or script-injection findings, and none grants top-level write access. However, all seven action references are unpinned and a high-confidence medium-severity secrets-inherit finding exposes credentials more broadly than necessary.