bare-url

Repo toolingcaution

The project uses CMake, but no security-scanning tool was detected; the missing scanning coverage is a modest transparency gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability reporting expectations unspecified; active releases and recent repository activity partly compensate.

Workflow auditcaution

All three workflows were analyzed, use read-only permissions, and had no injection or high-confidence audit findings, but all 12 action references are unpinned, creating a workflow supply-chain hygiene gap.