innobraingmbh/onoffice-structure

Security policycaution

The repository has no published security policy. This is a transparency and response-process gap, though active maintenance and security scanning partly offset it.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned and three workflows grant top-level write permissions. The audit also found one high-confidence bot-condition issue in the Dependabot auto-merge workflow, although no untrusted checkout or script injection was detected.