discourse/wp-discourse

Repo toolingcaution

Composer build tooling is present, but no automated security scanning tools were detected, leaving a security-process gap.

Security policycaution

The repository has no published security policy, which makes vulnerability-reporting expectations less transparent for a package integrating with WordPress and Discourse.

Workflow auditcaution

All four workflows were analyzed successfully with no untrusted checkout, injection, or high-severity findings. However, all 12 action references are unpinned, a reproducibility and supply-chain hygiene weakness.