horde/db

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scan is a modest transparency and maintenance gap, not evidence of unsafe code.

Security policycaution

The repository has no SECURITY.md or equivalent security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed completely with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, 6 of 7 action references are unpinned, which weakens build reproducibility and action supply-chain control.