westacks/telebot

Repo bus factorcaution

One contributor made all 20 commits in the last three months, creating a concentrated maintenance path. Organization ownership provides some backing, but no second active contributor is shown.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though the active repository and clean workflow audit provide some compensating evidence.

Workflow auditcaution

All 13 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, or high-severity workflow finding, and the single top-level write workflow is only a mild hygiene concern.