pressbooks/pressbooks-cas-sso

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; the organization-owned repository provides some capacity to hand off maintenance, so this is a caution rather than a severe risk.

Repo commit activitycaution

The repository recorded one commit from one active maintainer in the last three months, which confirms recent activity but indicates a slow maintenance pace.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear for a plugin that handles authentication integration.

Token permissionscaution

All five workflows omit top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege settings would make CI permissions more transparent.