nice-grpc-common

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable despite the otherwise established project evidence.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but all 10 action references are unpinned and the workflow has no top-level permissions block, creating a modest reproducibility and least-privilege gap.