automattic/jetpack-shared-extension-utils

Repo toolingcaution

The repository uses Composer build tooling, but no dedicated security scanning tool was detected. The available security policy and workflow audit provide some compensating transparency.

Workflow auditcaution

Both workflows were analyzed successfully, use no unpinned actions, and have no untrusted checkout or script-injection findings. The publisher workflow has a high-confidence adhoc package-install finding and a low-confidence cache-poisoning finding, so workflow hygiene is a minor concern.