opencoreemr/oce-cli-import-codes

Repo bus factorcaution

All recent commits came from one contributor, representing 100% of the three-month commit share. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. Recent pull-request merges show some activity, but direct commit activity is currently thin.

Security policycaution

The repository has no SECURITY.md or other declared security policy. This is a transparency gap, although it does not by itself indicate abandonment or unsafe code.

Version stabilitycaution

Version 2025.09.26 is not marked prerelease, although the latest version is still below 1.0. That signals some API maturity risk but is not severe given the regular release history.

Workflow auditcaution

All 13 workflows were analyzed successfully, with no untrusted checkout or script-injection findings. However, all 16 action references are unpinned, and high-confidence template-injection plus medium-confidence secrets-inherit findings warrant workflow hardening; the low-confidence cache-poisoning finding is secondary.