lochmueller/index

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a minor assurance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All four action references are unpinned, and the audit found a high-confidence template-injection issue in the release workflow. No untrusted checkout, script injection, dangerous trigger, or broad top-level write permission was reported, limiting the severity.