slub/slub-web-qucosa

Workflow auditdanger

All five analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot automerge workflow; one workflow also grants top-level write permissions, increasing automation risk.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which weakens the otherwise positive release history and suggests current source activity may be intermittent.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent.