tristan/asana

Release historycaution

The package is only 65 days old and has three releases clustered on its first release day, so long-term maintenance cannot yet be established. Recent repository activity partly compensates for the short history.

Repo bus factorcaution

Two contributors are active, but the leading contributor made about 71% of the 69 recent commits. The second active contributor provides some handoff capacity, so this is a modest resilience concern rather than a severe risk.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools are reported. That weakens automated security assurance without indicating a direct release problem.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous audit findings or untrusted checkouts. However, three of four action references are unpinned, which is a workflow reproducibility and supply-chain hygiene gap.