stripe

Repo toolingcaution

The project uses build tooling, but no security scanning tools were detected. This is a modest transparency gap, partly offset by the repository's security policy and active organizational maintenance.

Workflow auditcaution

All four workflows were analyzed, use read-only permissions, and have no untrusted checkout or dangerous trigger combination. Three high-confidence unpinned-tools findings and one script-injection finding warrant workflow hygiene attention, though the script-injection count is not paired with an untrusted trigger.