rollun-com/rollun-datastore

Licensecaution

A LICENSE.md file is present and detected as BSD-3-Clause, but the manifest declares the package as proprietary; this mismatch creates avoidable licensing uncertainty for consumers.

Repo bus factorcaution

One contributor made all 6 commits in the last 3 months, leaving maintenance highly concentrated. Organizational ownership provides some handoff capacity, but no second recent contributor is shown.

Security policycaution

The repository has no security policy, reducing transparency about how consumers should report vulnerabilities and how maintainers handle them.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of the two action references are unpinned, which weakens build reproducibility and supply-chain hygiene.