supseven/cleverreach

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. That is a meaningful maintenance warning, even though the recent release shows the project has not been abandoned outright.

Security policycaution

The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities. This is a transparency and maintenance gap, though it does not by itself make the release unfit.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or high-confidence audit findings. However, all four referenced actions are unpinned, creating a supply-chain hygiene weakness.