@electron-forge/template-webpack

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All six workflows use read-only permissions, pin all 23 action references, and have no untrusted checkout or script-injection findings. High-confidence adhoc-package findings in CI are a minor reproducibility concern; the cache findings are low-confidence hygiene signals.