webfactory/http-cache-bundle

Repo bus factorcaution

All recent commits came from one contributor, creating continuity risk; organization ownership provides some compensating maintenance capacity but no second active contributor is shown.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent for adopters.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts, script injection, or audit findings, but all eight action references are unpinned; that weakens build reproducibility and supply-chain hygiene without indicating a severe workflow risk.