vanilo/translation

Repo bus factorcaution

One contributor made all three commits in the last three months, leaving maintenance highly concentrated. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded three commits in the last three months, showing recent activity. However, all of that activity came from one active maintainer.

Security policycaution

The repository has no SECURITY.md or other detected security policy. This is a transparency and vulnerability-reporting gap, although it does not by itself indicate unsafe code.

Workflow auditcaution

The audit completed for both workflows and found no high-confidence findings or untrusted checkouts, but all three referenced actions are unpinned. The pull_request_target trigger has no accompanying sink, so it is not a danger on its own.