workofstan/backyard

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. This is a meaningful maintenance concern, though it is partly offset by the release history and recent repository push.

Security policycaution

The repository has no published security policy. This reduces transparency for reporting and handling vulnerabilities, although Dependabot is enabled as compensating security tooling.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, all 4 of 4 action references are unpinned, leaving avoidable supply-chain hygiene risk.