horde/listheaders

Repo commit activitycaution

Three commits from one active maintainer in the last three months show recent maintenance, though the activity is limited.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and defensive-maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, script injection, or audit findings; however, 6 of 7 action references are unpinned, which weakens build reproducibility.