nette/application

Repo bus factorcaution

Only one contributor made all 11 commits in the last three months. Organization backing helps with handoff potential, but no second recently active contributor is shown, so maintenance continuity remains a caution.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. The missing scanner is a hygiene limitation, not evidence that the package is unsafe or abandoned.

Workflow auditcaution

All three workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script injection; their lack of top-level permissions is acceptable. However, all 13 analyzed action references are unpinned, weakening build reproducibility and supply-chain integrity.