blutrixx/generator-engine

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. The active development evidence partly offsets this documentation gap but does not remove it.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or untrusted-code sinks, but all six action references are unpinned and one workflow grants top-level write access. These are workflow-reproducibility and least-privilege cautions, not a severe risk on their own.