dashed/dashed-marketing

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tooling was detected. The missing scanning is a modest transparency gap, not evidence of abandonment.

Security policycaution

The repository has no documented security policy. That weakens vulnerability-reporting transparency, although active maintenance and organization backing partly compensate.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-code sinks, but its token has top-level write access and its one action reference is unpinned. These are workflow hygiene risks, not severe concerns on their own.