mobbexco/php-plugins-sdk

Security policycaution

The repository has no SECURITY.md or other declared security policy. This is a transparency and vulnerability-reporting gap, though it does not by itself indicate unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths, but all 4 action references are unpinned. That leaves avoidable workflow reproducibility and action-substitution risk.