knplabs/knp-components

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less transparent for a dependency consumed by other projects.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkouts or script injection, but all five action references are unpinned and two high-confidence unpinned-image findings weaken build reproducibility; the low-confidence cache finding is only a hygiene concern.