mantas-done/subtitles

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though the package's recent maintenance and small dependency surface partly reduce its practical impact.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings, and it avoids broad top-level write permissions. However, all three action references are unpinned, leaving avoidable reproducibility and action-change risk.