yootheme/starter-utils

Repo bus factorcaution

One contributor made all seven recent commits, creating a meaningful continuity risk; organizational ownership provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

Seven commits were made in the last three months, showing recent activity, but all came from one active maintainer.

Repo toolingcaution

The project uses Task and Composer build tooling, but no security-scanning tool was detected, leaving a modest review-hygiene gap.

Security policycaution

The repository has no SECURITY.md or other detected security policy, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which is a build-reproducibility and action-supply-chain hygiene gap.