orieg/judy

Project backingcaution

The repository is owned by a user account rather than an organization, so the highly concentrated contributor activity has less visible organizational fallback.

Repo bus factorcaution

Although two contributors were active, one made 99.6% of the 236 recent commits. With user-owned rather than organization-backed project context, this concentration is a genuine continuity concern.

Workflow auditcaution

All 7 workflows were analyzed without untrusted checkouts or script-injection findings, but 58 of 98 action references are unpinned, 4 workflows grant top-level write permissions, and high-confidence template-injection findings occur in the release workflow. These are workflow hygiene concerns, though no dangerous trigger-and-sink combination was observed.