petrknap/shorts

Repo bus factorcaution

One contributor made all recent commits, leaving maintenance dependent on a single active individual.

Repo commit activitycaution

Only one commit was recorded in the last three months, so observed development activity is light even though releases remain recent.

Repo toolingcaution

Composer build tooling is present, providing a defined project build path. No security scanning tools were detected, which is a modest hygiene limitation but not decisive for this small library.

Security policycaution

The repository has no security policy. This is a transparency gap, although it is less severe for a small helper library than an actively security-sensitive package.

Workflow auditcaution

All three workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which is a supply-chain hygiene weakness.