milzer/checkout

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. For a package handling checkout and payment integrations, the missing disclosure process is a real maintenance and transparency gap.

Workflow auditcaution

Both workflows were fully audited with no untrusted checkouts, injection findings, or high-severity issues, and neither grants top-level write access. However, all six action references are unpinned, leaving them exposed to upstream changes.