coldtrick/tag_tools

Repo toolingcaution

Composer is used for builds, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

All three workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script-injection paths. However, all 3 of 3 action references are unpinned, a minor reproducibility and supply-chain hygiene gap.