xml-encryption

Lifecycle scriptscaution

A prepare script runs during installation, adding a small supply-chain and install-behavior consideration, although this is common for packages that build or prepare content.

Workflow auditcaution

All five workflows were analyzed with no untrusted checkout or script-injection findings and all action references pinned, but a high-confidence medium-severity secrets-inherit finding and two workflows with top-level write permissions warrant caution.