clarkewing/legacy-sync

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a hygiene gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy. For a package that synchronizes databases, this reduces transparency around vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, leaving build inputs less reproducible and increasing update risk.