smnandre/pagespeed-api

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.

Repo bus factorcaution

All 7 commits in the last 3 months came from one contributor, with that contributor holding 100% of recent commit activity; this creates a meaningful continuity risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, all 12 of 12 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.