alchemy/acl-bundle

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of unsafe code.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a security-relevant ACL component.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.