assegaiphp/util

Repo bus factorcaution

One contributor made all recent commits, concentrating maintenance responsibility completely. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing sparse recent development activity. This is a meaningful maintenance concern even though the repository was recently updated.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented. This lowers transparency but is not severe on its own.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. However, all three action references are unpinned, which leaves the build exposed to action-reference drift.