nette/assets

The organization-backed repository includes tests, a substantial README, a license, and release notes for this version. Recent source activity is thin and all 13 workflow actions are unpinned, so maintenance and build reproducibility deserve attention.

Latest v1.0.7

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made 100% of the single commit in the last three months. Organization ownership provides some handoff capacity, but the observed recent activity remains concentrated.

Repo commit activity

Only one commit was recorded in the last three months, showing thin recent development activity. Releases and organization backing partly offset this, but the low activity still reduces confidence in ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest repository-hygiene gap rather than evidence of unsafe code.

Workflow audit

All three workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or auditor findings. However, all 13 action references are unpinned, which weakens build reproducibility and supply-chain control.