greenter/xmldsig

Licensecaution

The manifest declares BSD-2-Clause, while the repository license file was detected as BSD-3-Clause; that mismatch creates a transparency concern despite the presence of a repository license.

Security policycaution

The repository has no published security policy. That weakens vulnerability-reporting transparency, although active maintenance and security scanning partly offset the gap.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, script injection, or high-severity findings. However, both action references are unpinned, leaving avoidable update and supply-chain uncertainty.