cultuurnet/udb3-silex

Dependency profilecaution

The release declares 66 runtime dependencies, creating a broad maintenance and transitive supply-chain surface for consumers.

Repo toolingcaution

Composer and Make are used for project builds, but no security-scanning tooling was detected, leaving a modest process gap.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

All three workflows were analyzed with no dangerous sinks or audit findings, and one scopes permissions at job level. However, all 14 action references are unpinned, which weakens build reproducibility and action-integrity hygiene.