yard/query-block

Repo bus factorcaution

One contributor accounts for all recent commits, creating a concentrated bus factor; organization ownership provides some capacity for handoff, but no second active contributor is shown.

Repo commit activitycaution

Only two commits from one active maintainer were recorded in the last three months, which shows recent activity but a thin maintenance base and potentially limited continuity.

Repo popularitycaution

The repository has only 2 stars and no forks, indicating limited external adoption or review; popularity is supporting evidence rather than a decisive health judgment, so this is a caution.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; this is a transparency gap for a dependency.

Token permissionscaution

Five of six workflows lack top-level permissions declarations and one workflow declares write access, reducing clarity around least-privilege automation despite the absence of other dangerous workflow patterns.