joedolson/my-calendar

Repo bus factorcaution

All 320 commits in the last three months came from one contributor, giving the project a high single-maintainer continuity risk despite its strong activity level.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent for users of this plugin.

Workflow auditcaution

All five workflows were analyzed successfully with no detected injection, untrusted checkout, or high-confidence audit findings, and no workflow grants top-level write access. However, all 14 analyzed action references are unpinned, which weakens build reproducibility and supply-chain integrity.