palmtree/form

Repo bus factorcaution

One contributor made all four commits in the last 3 months, creating a real concentration risk despite the organization's ability to provide some backing.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response contacts unclear.

Workflow auditcaution

All 6 analyzed action references are unpinned and one workflow has top-level write permissions, both meaningful hardening gaps. The reported cache-poisoning finding is low confidence, so it is hygiene rather than a severe risk; the audit itself analyzed all workflows successfully.