nette/utils

Repo bus factorcaution

All 17 recent commits came from one contributor, giving the project a high short-term bus-factor risk. Organization backing partly compensates because maintenance can be handed off, but no second active contributor is shown.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. This is a transparency and defense-in-depth gap, not evidence of unsafe code by itself.

Workflow auditcaution

All three workflows were analyzed without audit findings or untrusted-code sinks, and none has top-level write permissions. However, all 12 analyzed action references are unpinned, which weakens build reproducibility and exposes automation to upstream action changes.