@docusaurus/utils

Repo bus factorcaution

One contributor made about 96% of the recent commits, leaving maintenance heavily concentrated despite three other contributors being active.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @docusaurus/utils, creating some uncertainty about package-to-repository linkage. The mismatch is consistent with a monorepo sub-package, but the missing README mention remains a caution under this signal.

Workflow auditcaution

All 17 workflows were analyzed with no untrusted checkouts, script injections, or unpinned action references. High-confidence template-injection findings in publishing and use of trusted publishing were reported, while the remaining adhoc-package findings are low-severity hygiene issues, so workflow practices merit caution rather than a severe penalty.