avadim/fast-excel-writer

Repo bus factorcaution

All 45 recent commits came from one contributor, leaving a clear single-maintainer continuity risk; the repository owner is an individual rather than an organization.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy, reducing clarity for reporting and handling vulnerabilities, though this is not evidence of a vulnerability itself.

Workflow auditcaution

The workflow audit completed cleanly with read-only permissions, no untrusted checkouts, script injection, or findings. However, both analyzed action references are unpinned, creating a supply-chain hygiene gap.