r2luna/brain

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.

Repo bus factorcaution

One contributor made 100% of the single recent commit, leaving maintenance highly concentrated and increasing continuity risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, a weak recent activity level despite the strong registry release cadence; this lowers confidence in sustained repository work.

Security policycaution

No security policy was found in the repository, which is a modest transparency gap for a package that handles application workflows and sensitive values.

Workflow auditcaution

All three workflows were analyzed without failed files or dangerous sinks, and two use read-only permissions; however, all nine action references are unpinned and one workflow has top-level write permissions, weakening reproducibility and least-privilege hygiene.