jane-php/open-api-2

Repo toolingcaution

Composer build tooling is present, supporting reproducible project operations, although no security scanning tools were detected; the active release and commit history partly compensate for that hygiene gap.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations less transparent for users.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings. However, its only action use is unpinned, a supply-chain hygiene gap; the pull_request_target trigger is ordinary and has no corroborating dangerous sink.