lendable/composer-license-checker

Repo toolingcaution

The repository uses Composer build tooling, but reports no security-scanning tools; this is a modest supply-chain transparency gap, partially offset by the otherwise structured build setup.

Security policycaution

No security policy is present in the repository, which leaves vulnerability reporting and response expectations undocumented.

Token permissionscaution

Two workflows lack top-level permissions and one release workflow requests top-level write access; although no dangerous workflow pattern was detected, more explicit least-privilege declarations would improve CI hardening.