eighteen73/orbit

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected, leaving a modest gap in automated dependency and code-risk checks.

Security policycaution

The repository has no security policy, so disclosure and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous sinks or audit findings. However, all three analyzed actions are unpinned, which weakens build reproducibility and action provenance.