awobaz/compoships

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency gap, not evidence of an unsafe release by itself.

Security policycaution

The repository has no SECURITY.md policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The only workflow was fully analyzed with no injection or high-confidence audit findings and no broad top-level write permissions. However, both of its two action references are unpinned, which weakens build reproducibility and supply-chain hygiene.