xenon/nagad-api

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no visible organizational handoff capacity to offset the concentrated maintenance base.

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single active individual.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent development activity even though the repository was pushed recently.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings, but all four referenced actions are unpinned, making builds less reproducible and updates less controlled.