studioespresso/craft-scout

Repo bus factorcaution

All 23 commits in the last three months came from one contributor, creating a meaningful single-maintainer continuity risk. Organization backing provides some capacity for handoff, but no second active contributor is shown.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent. Security scanning provides partial compensation but does not replace a policy.

Workflow auditcaution

All five workflows were analyzed without high-confidence audit findings or untrusted checkout and script-injection sinks. However, all 13 action references are unpinned, weakening build reproducibility and supply-chain protection.