horde/itip

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent for a library handling scheduling data.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous audit findings, no untrusted checkouts, and no script injection. However, six of seven action references are unpinned, which weakens build reproducibility and supply-chain hygiene.