humanmade/query-filter

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Version stabilitycaution

Version v0.5.0 is not a prerelease, although the package remains below 1.0 and may still allow breaking changes under its versioning scheme.

Workflow auditcaution

All six workflows were analyzed and all 13 action references are pinned, with no untrusted checkout or script-injection trigger found. However, the release workflow has a high-confidence template-injection finding; the low-confidence cache-poisoning finding is only a hygiene concern.