cpsit/typo3-config-loader

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations less transparent for consumers.

Workflow auditcaution

All three workflows were analyzed, all 15 action references are pinned, and no untrusted checkout or script-injection path was found. One high-confidence template-injection finding in the release workflow remains a workflow hygiene concern, but no dangerous trigger was reported to amplify it.