recca/chinese-military-number

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance-capacity concern, although the recent release and repository push provide some compensating evidence.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding may allow actor-context spoofing. The pull_request_target workflow has no untrusted checkout or script-injection finding, so this is a workflow-hygiene caution rather than a standalone critical risk.