is-cidr

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All seven action references are unpinned and one workflow grants top-level write permissions, which weakens build reproducibility and least-privilege hygiene. The reported cache-poisoning issue is low confidence, so it is only a supporting concern; the audit otherwise analyzed both workflows completely and found no untrusted checkout or script-injection path.