vinkla/extended-acf

Repo bus factorcaution

Two contributors were active in the last 3 months, but one made 80% of commits. That concentration creates a moderate continuity concern despite the second active contributor.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence of an unsafe release by itself.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings and have no untrusted checkouts, script injection, or broad top-level write permissions. However, all 4 analyzed action references are unpinned, leaving avoidable action-update and supply-chain exposure.