ictinnovations/ictcore

Dependency profilecaution

The package declares nine runtime dependencies, which is a meaningful integration surface for a communications framework but not excessive for its stated functionality.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is configured. This is a transparency gap, though it is not evidence of abandonment by itself.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and disclosure expectations unclear for a framework handling communications services.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or high-severity findings, and it scopes permissions at job level. All seven action references are unpinned, which weakens build reproducibility and supply-chain hygiene.