peterwilsoncc/local-twemoji

Repo bus factorcaution

All 20 attributed commits in the last 3 months came from one contributor, leaving maintenance dependent on a single person.

Security policycaution

The repository has no published security policy, which reduces transparency for reporting and handling security issues.

Workflow auditcaution

All 8 workflows were analyzed, but 10 of 14 action references are unpinned and a high-confidence template-injection finding was reported. No untrusted checkout or dangerous trigger was observed, so this is a hygiene concern rather than a severe standalone risk.