angeo/module-ucp-catalog

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tools were detected, leaving a modest verification gap.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which weakens build reproducibility; the lack of a top-level permissions block is acceptable on its own.