rotexsoft/versatile-collections

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. This is a meaningful maintenance concern, though it is partly offset by two releases in the last 12 months and a recent repository push.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting vulnerabilities, though the presence of Psalm provides some compensating security tooling.

Workflow auditcaution

All 2 analyzed workflow actions are unpinned, which weakens build reproducibility and action supply-chain hygiene. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, and the lack of a top-level permissions block is acceptable on its own.