async-aws/iot

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a transparency and hygiene gap, though it is partly offset by the clean workflow audit.

Security policycaution

The repository has no security policy file. That reduces disclosure transparency for a library, although it does not by itself indicate abandonment.

Workflow auditcaution

All 4 analyzed action references are unpinned, so workflow dependencies can change unexpectedly. However, both workflows were fully audited, with no untrusted checkouts, script injection, dangerous triggers, or audit findings.