linkrobins/font-sizer

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tools were detected. This is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the active project and small scope partly reduce the concern.

Workflow auditcaution

The single workflow was fully analyzed, uses job-level permissions, and has no detected dangerous sinks or audit findings. Its one action reference is unpinned, creating a minor reproducibility and supply-chain hygiene concern.