kevinpapst/tabler-bundle

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it does not by itself indicate that the release is unsafe.

Workflow auditcaution

All 4 analyzed action references are unpinned, which weakens build reproducibility. The pull_request_target workflow had no untrusted checkout or script-injection finding, and two workflows use read-only permissions, so this remains a hygiene concern rather than a severe risk.