linkrobins/flarum-forage

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. That is a modest process gap, not evidence of abandonment.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the active repository and clear package structure provide some compensation.

Workflow auditcaution

Both workflows completed the audit without dangerous triggers or findings, and one scopes permissions at job level. However, both action references are unpinned, leaving a minor workflow reproducibility and supply-chain hygiene gap.