pictastudio/contento

Repo bus factorcaution

One contributor made all seven recent commits, giving the repository a 100% top-contributor share. That concentration increases abandonment and handoff risk despite the recent activity.

Repo commit activitycaution

Seven commits were made in the last 3 months, showing recent activity, but the activity is limited to one active maintainer. This supports current maintenance while leaving continuity uncertain.

Security policycaution

The repository has no security policy. This is a transparency gap for a library, although it does not by itself indicate abandonment or unsafe code.

Workflow auditcaution

All 8 analyzed action references are unpinned, and two workflows grant top-level write permissions. The audit also reports a high-confidence bot-conditions finding in the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink.