elao/form-translation-bundle

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a release-blocking concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout or script-injection findings, but all five action references are unpinned. The absence of a top-level permissions block is acceptable on its own, so this is a workflow hygiene caution.