peterwilsoncc/simple-search-submission

Licensecaution

The artifact declares MIT, but its LICENSE file is detected as GPL-2.0; although a license is present, the mismatch creates uncertainty about the terms governing this release.

Repo bus factorcaution

Only one contributor made the 2 commits in the last 3 months, holding 100% of recent commit activity; the repository is user-owned, so there is no demonstrated organizational handoff capacity.

Workflow auditcaution

All 7 workflows were analyzed, with no untrusted checkout or script-injection trigger, but 9 of 13 action references are unpinned, one workflow has top-level write access, and a high-confidence template-injection finding was reported.