fof/moderator-warnings

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest hygiene gap, not evidence of abandonment or an unsafe release by itself.

Version stabilitycaution

The assessed version is a pre-release, and 82% of recent releases were pre-releases. That lowers release maturity even though it is the current release.

Workflow auditcaution

All three workflows were analyzed with no injection, untrusted-checkout, or audit findings, and none grants top-level write access. However, all three action references are unpinned, leaving a supply-chain hygiene gap.