horde/image

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest process gap, not a sign of abandonment, because the repository remains actively maintained.

Security policycaution

The repository has no documented security policy. That is a transparency and vulnerability-reporting gap, though it is not evidence that the release is unsafe by itself.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, high-confidence findings, or broad write permissions. However, six of seven action references are unpinned, which weakens build reproducibility and supply-chain hygiene.