catlabinteractive/charon

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tool was detected. The missing scanner is a modest process gap, not evidence of abandonment.

Security policycaution

The repository has no security policy. That reduces disclosure transparency for a framework handling API infrastructure, though active commits and organization backing partly compensate.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported injection or other audit findings. Both action references are unpinned, which is a minor supply-chain hygiene weakness.