checkthiscloud/crockford-random

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a real transparency gap for a library handling random-code generation.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, injection findings, or excessive permissions, but all eight action references are unpinned, weakening build reproducibility.