lopescte/utilities-for-adianti

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. Because the release is only 185 days old, this is a meaningful sign that ongoing maintenance may have slowed.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and hygiene gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy. This makes vulnerability reporting and response expectations less clear for consumers.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout or script-injection findings, but it grants top-level write permissions, leaves both action references unpinned, and high-confidence auditing found an ad hoc package installation. These are workflow hygiene risks rather than severe standalone concerns.