thecodingmachine/graphqlite-bundle

Repo bus factorcaution

All 3-month commit activity came from one contributor, creating a thin recent contributor base; organization backing partly reduces the handoff concern.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, which is modest activity, although the package also published a current release during that period.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations less transparent for consumers.

Workflow auditcaution

Both workflows were analyzed with no dangerous sinks or audit findings, but all 8 action references are unpinned, leaving avoidable reproducibility and action-integrity exposure.