horde/prefs

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency, although the active repository and release history provide compensating maintenance evidence.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings, and one scopes permissions at job level. However, 6 of 7 action references are unpinned, leaving avoidable workflow supply-chain hygiene risk.