pods-framework/pods

Repo bus factorcaution

All 4 recent commits came from one contributor, creating a narrow recent maintenance base. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Only 4 commits were recorded in the last 3 months, which is limited for an actively released framework and suggests slower recent implementation activity.

Workflow auditcaution

All 15 workflows were analyzed, but all 39 action references are unpinned, two workflows grant top-level write permissions, and high-confidence template-injection findings plus secrets inheritance weaken automation hygiene. No untrusted checkout or script-injection trigger was reported, limiting the severity.