aura/html

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, leaving reporting and vulnerability-response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all eight referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.