horde/mime_viewer

Repo toolingcaution

The project uses Composer for builds, but no security-scanning tool was detected. The missing scanner is a modest process gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy. That weakens vulnerability-reporting transparency, though active releases and recent commits provide some compensating maintenance evidence.

Workflow auditcaution

Both workflows were analyzed successfully with no high- or medium-confidence audit findings, no untrusted checkouts, and no script injection. However, 6 of 7 action references are unpinned, which leaves the build exposed to moving action code despite otherwise reasonable permissions.